DataDog / KubeHound

Kubernetes Attack Graph
https://kubehound.io
Apache License 2.0
705 stars 39 forks source link

Support for namespaced resources in the collect script #160

Open rh-tguittet opened 6 months ago

rh-tguittet commented 6 months ago

The collect.sh script did not fully differentiate between namespaced and non-namespaced api-resources. If you used it to quickly dump an entire cluster or turn the allowlist off, non-namespaced resources will be pulled and stored for each namespace in the cluster.

On request, I can refactor the code and extract the logic to a single function.