Skip to main content

​
More Info:

Kubernetes Roles and ClusterRoles provide access to resources based on sets of objects and actions that can be taken on those objects. It is possible to set either of these to be the wildcard * which matches all items.

​
Risk Level

Medium

​
Address

Security

​
Compliance Standards

  • CIS Kubernetes

​
Triage and Remediation

​
Remediation

Using Console

Retrieve the roles defined across each namespaces in the cluster and review forwildcardskubectl get roles —all-namespaces -o yamlRetrieve the cluster roles defined in the cluster and review for wildcardskubectl get clusterroles -o yaml