Kubernetes Cluster DashboardKubernetes Cluster DetailKubernetes Cluster Role DetailKubernetes Container DashboardKubernetes Container DetailKubernetes CronJob Age ReportKubernetes CronJob DashboardKubernetes CronJob DetailKubernetes CronJob Host Access ReportKubernetes DaemonSet Age ReportKubernetes DaemonSet DashboardKubernetes DaemonSet DetailKubernetes DaemonSet Host Access ReportKubernetes Deployment Age ReportKubernetes Deployment DashboardKubernetes Deployment DetailKubernetes Deployment HA ReportKubernetes Deployment Host Access ReportKubernetes Job Age ReportKubernetes Job DashboardKubernetes Job DetailKubernetes Job Host Access ReportKubernetes Namespace Age ReportKubernetes Namespace DetailKubernetes Namespace ReportKubernetes Node Age ReportKubernetes Node DetailKubernetes Node ReportKubernetes Pod Age ReportKubernetes Pod DashboardKubernetes Pod DetailKubernetes Pod Host Access ReportKubernetes RBAC - Who can delete events?Kubernetes RBAC - Who can delete pods?Kubernetes RBAC - Who can escalate privileges via node/proxy?Kubernetes RBAC - Who can exec into pods?Kubernetes RBAC - Who can read secrets?Kubernetes RBAC ExplorerKubernetes ReplicaSet Age ReportKubernetes ReplicaSet DashboardKubernetes ReplicaSet DetailKubernetes ReplicaSet Host Access ReportKubernetes Role DetailKubernetes Service Account DetailKubernetes Service Age ReportKubernetes Service DashboardKubernetes Service DetailKubernetes StatefulSet Age ReportKubernetes StatefulSet DashboardKubernetes StatefulSet DetailKubernetes StatefulSet Host Access Report
Dashboard: Kubernetes Container Dashboard
This dashboard answers the following questions:
- How many containers are in each cluster and namespace?
- How many privileged containers are there?
- How many containers have privilege escalation enabled?
- How many containers do not have any liveness probe?
This dashboard contains 6 cards.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-kubernetes-insightsStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select Kubernetes Container Dashboard dashboard.
You could also snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe dashboard run kubernetes_insights.dashboard.container_dashboard --shareQueries
The dashboard uses the named queries:
- container_allow_privilege_escalation_count
- container_allow_privilege_escalation_status
- container_by_context_name
- container_by_namespace
- container_by_pod
- container_count
- container_immutable_root_filesystem_count
- container_immutable_root_filesystem_status
- container_liveness_probe_count
- container_liveness_probe_status
- container_privileged_count
- container_privileged_status
- container_readiness_probe_count
- container_readiness_probe_status