Kubernetes Cluster DashboardKubernetes Cluster DetailKubernetes Cluster Role DetailKubernetes Container DashboardKubernetes Container DetailKubernetes CronJob Age ReportKubernetes CronJob DashboardKubernetes CronJob DetailKubernetes CronJob Host Access ReportKubernetes DaemonSet Age ReportKubernetes DaemonSet DashboardKubernetes DaemonSet DetailKubernetes DaemonSet Host Access ReportKubernetes Deployment Age ReportKubernetes Deployment DashboardKubernetes Deployment DetailKubernetes Deployment HA ReportKubernetes Deployment Host Access ReportKubernetes Job Age ReportKubernetes Job DashboardKubernetes Job DetailKubernetes Job Host Access ReportKubernetes Namespace Age ReportKubernetes Namespace DetailKubernetes Namespace ReportKubernetes Node Age ReportKubernetes Node DetailKubernetes Node ReportKubernetes Pod Age ReportKubernetes Pod DashboardKubernetes Pod DetailKubernetes Pod Host Access ReportKubernetes RBAC - Who can delete events?Kubernetes RBAC - Who can delete pods?Kubernetes RBAC - Who can escalate privileges via node/proxy?Kubernetes RBAC - Who can exec into pods?Kubernetes RBAC - Who can read secrets?Kubernetes RBAC ExplorerKubernetes ReplicaSet Age ReportKubernetes ReplicaSet DashboardKubernetes ReplicaSet DetailKubernetes ReplicaSet Host Access ReportKubernetes Role DetailKubernetes Service Account DetailKubernetes Service Age ReportKubernetes Service DashboardKubernetes Service DetailKubernetes StatefulSet Age ReportKubernetes StatefulSet DashboardKubernetes StatefulSet DetailKubernetes StatefulSet Host Access Report
Dashboard: Kubernetes RBAC Explorer
This dashboard answers the following questions for each cluster:
- Who can perform operations like list, get, read etc. on my resources?
This dashboard contains 1 graph, 3 inputs and 1 table.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-kubernetes-insightsStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select Kubernetes RBAC Explorer dashboard.
You could also snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe dashboard run kubernetes_insights.dashboard.rbac_explorer --shareQueries
The dashboard uses the named queries: