You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Security point: Anonymous user has RoleBinding #404
Matthieu ROBIN (@matthieu-robin) Hi! Please provide more detailed report from kubescape. It does sound like a critical vulnerability, but we will look what we can do with it. Also it is not clear about which cluster you are talking about - main (based on talos) or tenant ones.
Hi, here is the full report of Kubescape based on the version 0.16.2 of Cozystack ( Talos version 1.7.1).
The command used: kubescape scan -v -e tenant-ssl-jluc,opencost,neuvector,tenant-matthieu --format html --output results.html results.html.zip
Activity
gecube commentedon Oct 9, 2024
Matthieu ROBIN (@matthieu-robin) Hi! Please provide more detailed report from kubescape. It does sound like a critical vulnerability, but we will look what we can do with it. Also it is not clear about which cluster you are talking about - main (based on talos) or tenant ones.
matthieu-robin commentedon Oct 9, 2024
Hi, here is the full report of Kubescape based on the version 0.16.2 of Cozystack ( Talos version 1.7.1).
The command used:
kubescape scan -v -e tenant-ssl-jluc,opencost,neuvector,tenant-matthieu --format html --output results.htmlresults.html.zip
Let me know if you need more help on this
kvaps commentedon Mar 25, 2025
I think this is inteded behavior of kubernetes cluster, we don't mange this rolebinding from cozystack side
kvaps commentedon Mar 25, 2025
For more info please refer to Kubernetes documentation
https://kubernetes.io/docs/reference/access-authn-authz/rbac/#discovery-roles
[kilo] Switch from fork to upstream squat/kilo
[kilo] Switch from fork to upstream squat/kilo (#2259)