Kubernetes Cluster DashboardKubernetes Cluster DetailKubernetes Cluster Role DetailKubernetes Container DashboardKubernetes Container DetailKubernetes CronJob Age ReportKubernetes CronJob DashboardKubernetes CronJob DetailKubernetes CronJob Host Access ReportKubernetes DaemonSet Age ReportKubernetes DaemonSet DashboardKubernetes DaemonSet DetailKubernetes DaemonSet Host Access ReportKubernetes Deployment Age ReportKubernetes Deployment DashboardKubernetes Deployment DetailKubernetes Deployment HA ReportKubernetes Deployment Host Access ReportKubernetes Job Age ReportKubernetes Job DashboardKubernetes Job DetailKubernetes Job Host Access ReportKubernetes Namespace Age ReportKubernetes Namespace DetailKubernetes Namespace ReportKubernetes Node Age ReportKubernetes Node DetailKubernetes Node ReportKubernetes Pod Age ReportKubernetes Pod DashboardKubernetes Pod DetailKubernetes Pod Host Access ReportKubernetes RBAC - Who can delete events?Kubernetes RBAC - Who can delete pods?Kubernetes RBAC - Who can escalate privileges via node/proxy?Kubernetes RBAC - Who can exec into pods?Kubernetes RBAC - Who can read secrets?Kubernetes RBAC ExplorerKubernetes ReplicaSet Age ReportKubernetes ReplicaSet DashboardKubernetes ReplicaSet DetailKubernetes ReplicaSet Host Access ReportKubernetes Role DetailKubernetes Service Account DetailKubernetes Service Age ReportKubernetes Service DashboardKubernetes Service DetailKubernetes StatefulSet Age ReportKubernetes StatefulSet DashboardKubernetes StatefulSet DetailKubernetes StatefulSet Host Access Report
Dashboard: Kubernetes Container Detail
This dashboard answers the following questions for each container:
- What relationships does the container have with other resources?
- How is my container configured?
- Is my container privileged or not?
- What volume mounts are applied?
This dashboard contains 5 cards, 1 graph, 1 input and 3 tables.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-kubernetes-insightsStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select Kubernetes Container Detail dashboard.
You could also snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe dashboard run kubernetes_insights.dashboard.container_detail --shareQueries
This dashboard uses the the following queries:
select case when c -> 'securityContext' ->> 'allowPrivilegeEscalation' = 'true' then 'Enabled' else 'Disabled' end as value, 'Privilege Escalation' as label, case when c -> 'securityContext' ->> 'allowPrivilegeEscalation' = 'true' then 'alert' else 'ok' end as typefrom kubernetes_pod, jsonb_array_elements(containers) as cwhere concat(c ->> 'name',name) = $1;
{ "$1": "name"}