Posts

A namespaced attacker creates a Kafka object and reads every Secret in every namespace, by making the Strimzi operator plant a Role and RoleBinding.

Any tenant with create GrafanaDashboard or GrafanaLibraryPanel access can read the Grafana operator's ServiceAccount token, which has effectively cluster-admin privilege. Grafana rated it Medium.