search

aquasecurity / kube-hunter

Hunt for security weaknesses in Kubernetes clusters
Apache License 2.0
4.7k stars 581 forks source link

Azure AzureSpnHunter is not working as expected #370

Closed itaysk closed 3 years ago

itaysk commented 3 years ago

Azure AzureSpnHunter is not finding pods with access to /etc/kubernetes/azure.json The code had a couple issues:

  1. it checks the container mountPath, which only says about how the container sees the mount, not what is being mounted
  2. it doesn't check the volume type. only hostPath volumes should be considered I have a PR to fix that