Kubernetes: Security - which pods can access API server #45
Description
Check that should scan all pods -> their service accounts and identify if they can access API server resources (leading to leaking access to API server in case of compromising a Kubernetes node)
There could be two variants:
- Alert if given cluster node has API key
- Alert if given pods are having API keys