PaloAltoNetworks / rbac-police

Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego
https://www.paloaltonetworks.com/resources/whitepapers/kubernetes-privilege-escalation-excessive-permissions-in-popular-platforms
MIT License
331 stars 35 forks source link

Collect NodeRestriction, consume in affected policies #7

Closed yuvalavra closed 2 years ago

yuvalavra commented 2 years ago

Collect NodeRestriction when --discover-protections is enabled, consume in affected policies