turbot/kubernetes_compliance
Loading controls...

Control: ClusterRoles permissions for approving CertificateSigningRequests

Description

Minimize the permissions granted to ClusterRoles for approving CertificateSigningRequests. It is recommended to follow the principle of least privilege to enhance security.

Usage

Run the control in your terminal:

powerpipe control run kubernetes_compliance.control.role_with_rbac_approve_certificate_signing_requests

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run kubernetes_compliance.control.role_with_rbac_approve_certificate_signing_requests --share

SQL

This control uses a named query:

role_with_rbac_approve_certificate_signing_requests

Tags