RBAC Atlas is a curated database of identities and the Role Based Access Control (RBAC) policies associated with them in popular Kubernetes open-source projects. Each entry includes security annotations that highlight granted permissions, potential risks, and possible abuse scenarios.

Why is RBAC important? RBAC is the final layer of defense in Kubernetes security. If workloads are compromised and an identity is stolen, a misconfigured or overly permissive RBAC policy (common with Operators) can enable attackers to move laterally within your cluster, potentially leading to a complete Kubernetes cluster takeover.

RBAC Atlas is a collaborative project created by Lenin Alevski, and contributions of additional RBAC rules are welcome.

🚀 Top Risks

informationdisclosure reconnaissance dataexposure configmapaccess potentialprivilegeescalation tampering credentialaccess clusterstructure secretaccess clusterwidesecretaccess See All →

📦 Top Categories

database operator cluster sql storage argocd argoproj gitops kube-prometheus kubernetes postgres postgresql prometheus consumer ingress kafka keyvalue monitoring producer redis See All →

📜 All Projects

All A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

kafka

v32.2.13
2 1 0

Apache Kafka is a distributed streaming platform designed to build real-time pipelines and can be used as a message broker or as a replacement for a log aggregation solution for big data applications.

#letter-K 

keycloak

v24.7.3
2 2 0

Keycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort.

#letter-K