[QUESTION] [k8s] Cluster admin binding

[loresuso]

Would it make sense to implement a technique to create a role binding to a cluster role?

It is also something mentioned here https://www.microsoft.com/en-us/security/blog/2020/04/02/attack-matrix-kubernetes/

[christophetd]

Would that be a situation where:

• An existing role (e.g. "unprivileged") exists and has some level of permissions in a namespace
• As an attacker, you create a ClusterRoleBinding to make it admin at the cluster level?

[christophetd]

closing for inactivity but feel free to reopen

[loresuso]

Hi @christophetd, sorry about the inactivity! I will reopen it once I will have more bandwidth for this, thanks!