Kubernetes
You're viewing a free preview. Sign in free to read every script.
Why this exists kubectl get clusterrolebindings lists names. It does not tell you which of those bindings actually grant cluster admin equivalent power, which ones can read every Secret in the cluster, or whether anyone…
RBAC Audit: Who Can Do What in This Cluster
A read-only script that resolves every ClusterRoleBinding and RoleBinding to its actual rules and flags cluster-admin-equivalent grants, broad Secret-reading access and a namespace's default ServiceAccount bound to real power — run for real against a live cluster, correctly separating legitimate controller permissions from two genuinely dangerous, deliberately created mistakes.
Sign in free to read this script, along with the rest of the library.
Sign in free