You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It worked when added ClusterRole for listing namespaces.
The logic behind the hunter is to list namespaces and try to create a pod inside every namespace found.
When there is no access to list namespaces, the hunter will not try to create a pod.
The desired behavior is to create a pod inside the service account namespace when no namespaces discovered.
danielsagi
changed the title
API server access tests are skipped
Api Server hunting: Not creating pod when no permissions to list namespaces
Nov 28, 2020
What happened
Started kube-hunter in active mode with RBAC rules enabled for pod creation.
kube-hunter did not report about successful pod creation.
Expected behavior
kube-hunter reports about successful pod creation
The text was updated successfully, but these errors were encountered: