Kubernetes Cluster DashboardKubernetes Cluster DetailKubernetes Cluster Role DetailKubernetes Container DashboardKubernetes Container DetailKubernetes CronJob Age ReportKubernetes CronJob DashboardKubernetes CronJob DetailKubernetes CronJob Host Access ReportKubernetes DaemonSet Age ReportKubernetes DaemonSet DashboardKubernetes DaemonSet DetailKubernetes DaemonSet Host Access ReportKubernetes Deployment Age ReportKubernetes Deployment DashboardKubernetes Deployment DetailKubernetes Deployment HA ReportKubernetes Deployment Host Access ReportKubernetes Job Age ReportKubernetes Job DashboardKubernetes Job DetailKubernetes Job Host Access ReportKubernetes Namespace Age ReportKubernetes Namespace DetailKubernetes Namespace ReportKubernetes Node Age ReportKubernetes Node DetailKubernetes Node ReportKubernetes Pod Age ReportKubernetes Pod DashboardKubernetes Pod DetailKubernetes Pod Host Access ReportKubernetes RBAC - Who can delete events?Kubernetes RBAC - Who can delete pods?Kubernetes RBAC - Who can escalate privileges via node/proxy?Kubernetes RBAC - Who can exec into pods?Kubernetes RBAC - Who can read secrets?Kubernetes RBAC ExplorerKubernetes ReplicaSet Age ReportKubernetes ReplicaSet DashboardKubernetes ReplicaSet DetailKubernetes ReplicaSet Host Access ReportKubernetes Role DetailKubernetes Service Account DetailKubernetes Service Age ReportKubernetes Service DashboardKubernetes Service DetailKubernetes StatefulSet Age ReportKubernetes StatefulSet DashboardKubernetes StatefulSet DetailKubernetes StatefulSet Host Access Report
Dashboard: Kubernetes DaemonSet Host Access Report
This report answers the following questions:
- Do my DaemonSets have host network access enabled?
- What is the status of host PID and IPC sharing?
This dashboard contains 4 cards and 1 table.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-kubernetes-insightsStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select Kubernetes DaemonSet Host Access Report dashboard.
You could also snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe dashboard run kubernetes_insights.dashboard.daemonset_host_access_report --shareQueries
The dashboard uses the named queries:
- daemonset_container_host_ipc_count
- daemonset_container_host_network_count
- daemonset_container_host_pid_count
- daemonset_count
- daemonset_host_table