KubiScan – a tool for scanning the cluster Kubernetes for risky permissions in the Kubernetes Role-based access control (RBAC) authorization model. This tool was published as part of the research 'Securing Kubernetes Clusters by Eliminating Risky Permissions.'
Kubernetes – open-source software for automating the deployment, scaling, and management of containerized applications. It supports main containerization technologies including Docker, rkt, and may also support hardware virtualization technologies.
KubiScan helps cluster administrators identify permissions that attackers could potentially exploit to compromise them. This can be particularly useful in large environments where tracking numerous permissions manually becomes challenging. KubiScan gathers information on risky rules and users, automating traditional manual checks and providing administrators with the necessary information to reduce risk.
Distributed under the GNU General Public License v3.0.
Source: linux.org.ru
