15 docs tagged with "rbac"

aad-pod-identity enables Kubernetes pods on Azure to use Azure Active Directory identities for accessing Azure resources without storing credentials.

audit2rbac automatically generates RBAC policies from Kubernetes audit logs, enabling precise least-privilege configurations based on actual API usage.

Attack scenario demonstrating how kubectl exec and attach commands can be abused to steal credentials and sensitive data from running containers.

Step-by-step guide on generating and issuing a certificate for a Kubernetes user, including creating roles and configuring kubeconfig.

How overly permissive Kubernetes RBAC configurations enable privilege escalation and full cluster compromise.

kiam provides AWS IAM credentials to pods running on Kubernetes, using a client-server architecture for improved security over metadata interception.

kube2iam enables Kubernetes pods to assume AWS IAM roles, providing fine-grained AWS credential management without exposing long-lived credentials.

kubectl-bindrole finds all Kubernetes roles and cluster roles bound to a specified ServiceAccount, User, or Group, helping audit RBAC configurations.

kubectl-who-can shows which subjects have RBAC permissions to perform specific actions on Kubernetes resources, helping identify privilege distribution.

kubernetes-rbac-audit is an auditing tool that analyzes RBAC configurations to identify risky permissions and potential security misconfigurations.

How attackers exploit overly privileged Kubernetes Service Accounts to gain cluster-wide access and escalate privileges.

rakkess displays an access matrix showing which Kubernetes resources a user, group, or service account can access, providing a comprehensive RBAC overview.

rback generates visual diagrams of Kubernetes RBAC configurations, making it easier to understand and audit complex permission structures.

Learn how Role-Based Access Control (RBAC) in Kubernetes manages authorization and improves security.

How to control ephemeral container and kubectl debug access through RBAC, Pod Security Standards, and admission control in Kubernetes.