cozystack Security point: Anonymous user has RoleBinding

After a kubescape scan, we have detected that Anonymous user has RoleBinding. Should be more secure to close it. Thanks

Oct 08 '24 19:10 matthieu-robin

@matthieu-robin Hi! Please provide more detailed report from kubescape. It does sound like a critical vulnerability, but we will look what we can do with it. Also it is not clear about which cluster you are talking about - main (based on talos) or tenant ones.

Oct 09 '24 04:10 gecube

Hi, here is the full report of Kubescape based on the version 0.16.2 of Cozystack ( Talos version 1.7.1). The command used: kubescape scan -v -e tenant-ssl-jluc,opencost,neuvector,tenant-matthieu --format html --output results.html results.html.zip

Let me know if you need more help on this

Oct 09 '24 06:10 matthieu-robin

I think this is inteded behavior of kubernetes cluster, we don't mange this rolebinding from cozystack side

Mar 25 '25 10:03 kvaps

For more info please refer to Kubernetes documentation https://kubernetes.io/docs/reference/access-authn-authz/rbac/#discovery-roles

Mar 25 '25 10:03 kvaps