Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster

HIGH
Source
Trivy
ID
5.1.8
Version
1.23

5.1.8 - Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster

Cluster roles and roles with the impersonate, bind or escalate permissions should not be granted unless strictly required

Control Checks

  • AVD-KSV-0043 - Do not allow impersonation of privileged groups