Skip to content

Security point: Anonymous user has RoleBinding #404

Closed

Description

After a kubescape scan, we have detected that Anonymous user has RoleBinding.
Should be more secure to close it.
Thanks

Activity

  1. gecube commented on Oct 9, 2024

    @gecube
    Collaborator

    Matthieu ROBIN (@matthieu-robin) Hi! Please provide more detailed report from kubescape. It does sound like a critical vulnerability, but we will look what we can do with it. Also it is not clear about which cluster you are talking about - main (based on talos) or tenant ones.

  2. matthieu-robin commented on Oct 9, 2024

    @matthieu-robin
    CollaboratorAuthor

    Hi, here is the full report of Kubescape based on the version 0.16.2 of Cozystack ( Talos version 1.7.1).
    The command used: kubescape scan -v -e tenant-ssl-jluc,opencost,neuvector,tenant-matthieu --format html --output results.html
    results.html.zip

    Let me know if you need more help on this

  3. kvaps commented on Mar 25, 2025

    @kvaps
    Member
    Image

    I think this is inteded behavior of kubernetes cluster, we don't mange this rolebinding from cozystack side

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    securitySecurity-related issues and featuresupstream-issueRequires resolving an issue in an upstream project

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions