Steampipe mods are now Powerpipe →

Plugins Docs Home

turbot/kubernetes_insights

0Controls

0Variables

cluster_containers_count cluster_count cluster_cronjobs_count cluster_daemonsets_count cluster_deployments_count cluster_input cluster_jobs_count cluster_namespace_count cluster_namespaces_count cluster_namespaces_table cluster_node_count cluster_nodes_count cluster_nodes_table cluster_persistent_volumes_count cluster_persistent_volumes_table cluster_pod_security_policy_count cluster_pod_security_policy_table cluster_pods_count cluster_repliasets_count cluster_role_annotations cluster_role_binding_count cluster_role_binding_table cluster_role_bindings_for_cluster cluster_role_bindings_for_cluster_role cluster_role_count cluster_role_input cluster_role_labels cluster_role_overview cluster_role_rules_count cluster_role_rules_detail cluster_role_rules_for_cluster_role cluster_role_table cluster_roles_for_cluster cluster_services_count cluster_statefulsets_count clusters_for_namespace clusters_for_node configmaps_for_container configmaps_for_pod container_allow_privilege_escalation container_allow_privilege_escalation_count container_allow_privilege_escalation_status container_by_context container_by_context_name container_by_namespace container_by_pod container_count container_cpu_resources container_immutable_root_filesystem container_immutable_root_filesystem_count container_immutable_root_filesystem_status container_input container_liveness_probe container_liveness_probe_count container_liveness_probe_status container_memory_resources container_overview container_ports container_privileged container_privileged_count container_privileged_status container_readiness_probe container_readiness_probe_count container_readiness_probe_status container_volume_mount containers_for_cronjob containers_for_daemonset containers_for_deployment containers_for_job containers_for_pod containers_for_replicaset cronjob_1_year_count cronjob_24_hours_count cronjob_30_90_days_count cronjob_30_days_count cronjob_90_365_days_count cronjob_age_table cronjob_annotations cronjob_by_context cronjob_by_context_name cronjob_by_creation_month cronjob_by_namespace cronjob_configuration_detail cronjob_container_host_ipc cronjob_container_host_ipc_count cronjob_container_host_ipc_status cronjob_container_host_network cronjob_container_host_network_count cronjob_container_host_network_status cronjob_container_host_pid cronjob_container_host_pid_count cronjob_container_host_pid_status cronjob_count cronjob_default_namespace cronjob_default_namespace_count cronjob_default_namespace_status cronjob_host_table cronjob_input cronjob_jobs_detail cronjob_labels cronjob_overview cronjob_pods_detail cronjob_tree cronjobs_for_job cronjobs_for_namespace daemonset_1_year_count daemonset_24_hours_count daemonset_30_90_days_count daemonset_30_days_count daemonset_90_365_days_count daemonset_age_table daemonset_annotations daemonset_by_context daemonset_by_context_name daemonset_by_creation_month daemonset_by_namespace daemonset_conditions daemonset_container_host_ipc daemonset_container_host_ipc_count daemonset_container_host_ipc_status daemonset_container_host_network daemonset_container_host_network_count daemonset_container_host_network_status daemonset_container_host_pid daemonset_container_host_pid_count daemonset_container_host_pid_status daemonset_count daemonset_default_namespace daemonset_default_namespace_count daemonset_default_namespace_status daemonset_host_table daemonset_input daemonset_labels daemonset_node_detail daemonset_node_status daemonset_overview daemonset_pods_detail daemonset_strategy daemonset_tree daemonsets_for_namespace daemonsets_for_pod deployment_1_year_count deployment_24_hours_count deployment_30_90_days_count deployment_30_days_count deployment_90_365_days_count deployment_age_table deployment_annotations deployment_by_context deployment_by_context_name deployment_by_creation_month deployment_by_namespace deployment_conditions deployment_container_host_ipc deployment_container_host_ipc_count deployment_container_host_ipc_status deployment_container_host_network deployment_container_host_network_count deployment_container_host_network_status deployment_container_host_pid deployment_container_host_pid_count deployment_container_host_pid_status deployment_container_replica_status deployment_count deployment_default_namespace deployment_default_namespace_count deployment_default_namespace_status deployment_ha deployment_host_table deployment_input deployment_labels deployment_overview deployment_pods_detail deployment_replica deployment_replica_count deployment_replicas_detail deployment_replicas_table deployment_replicasets_detail deployment_strategy deployment_tree deployments_for_namespace deployments_for_pod deployments_for_replicaset deployments_for_service endpoints_for_node ingresses_for_service init_containers_for_pod job_1_year_count job_24_hours_count job_30_90_days_count job_30_days_count job_90_365_days_count job_age_table job_annotations job_by_context job_by_context_name job_by_creation_month job_by_namespace job_conditions job_container_host_ipc job_container_host_ipc_count job_container_host_ipc_status job_container_host_network job_container_host_network_count job_container_host_network_status job_container_host_pid job_container_host_pid_count job_container_host_pid_status job_count job_default_namespace job_default_namespace_count job_default_namespace_status job_host_table job_input job_labels job_overview job_pods_detail job_status_detail job_tree jobs_for_cronjob jobs_for_namespace jobs_for_pod kubernetes_cluster_resources kubernetes_cluster_verbs namespace_1_year_count namespace_24_hours_count namespace_30_90_days_count namespace_30_days_count namespace_90_365_days_count namespace_age_table namespace_annotations namespace_by_context namespace_count namespace_daemonset_count namespace_daemonset_table namespace_deployment_count namespace_deployment_table namespace_input namespace_labels namespace_overview namespace_pod_count namespace_pod_table namespace_replicaset_count namespace_replicaset_table namespace_service_count namespace_service_table namespace_table namespaces_for_cluster node_1_year_count node_24_hours_count node_30_90_days_count node_30_days_count node_90_365_days_count node_addresses node_age_table node_allocatable node_annotations node_by_context node_capacity node_conditions node_containers_count node_count node_hierarchy node_input node_labels node_overview node_pod_details node_pods_count node_table nodes_for_cluster nodes_for_cronjob nodes_for_daemonset nodes_for_deployment nodes_for_job nodes_for_replicaset nodes_for_statefulset persistent_volume_claims_for_container persistent_volumes_for_cluster persistent_volumes_for_container persistent_volumes_for_pod pod_1_year_count pod_24_hours_count pod_30_90_days_count pod_30_days_count pod_90_365_days_count pod_age_table pod_annotations pod_by_context pod_by_context_name pod_by_creation_month pod_by_namespace pod_by_phase pod_conditions pod_configuration pod_container pod_container_basic_detail pod_container_count pod_container_cpu_detail pod_container_host_ipc pod_container_host_ipc_count pod_container_host_ipc_status pod_container_host_network pod_container_host_network_count pod_container_host_network_status pod_container_host_pid pod_container_host_pid_count pod_container_host_pid_status pod_container_memory_detail pod_count pod_default_namespace pod_default_namespace_count pod_default_namespace_status pod_host_table pod_init_containers_detail pod_input pod_labels pod_overview pod_persistent_volume_claims pod_security_policies_for_cluster pod_status pod_volumes pods_for_container pods_for_cronjob pods_for_daemonset pods_for_deployment pods_for_job pods_for_node pods_for_replicaset pods_for_service pods_for_service_account pods_for_statefulset rbac_rule_analysis replicaset_1_year_count replicaset_24_hours_count replicaset_30_90_days_count replicaset_30_days_count replicaset_90_365_days_count replicaset_age_table replicaset_annotations replicaset_by_context replicaset_by_context_name replicaset_by_creation_month replicaset_by_namespace replicaset_conditions replicaset_container_host_ipc replicaset_container_host_ipc_count replicaset_container_host_ipc_status replicaset_container_host_network replicaset_container_host_network_count replicaset_container_host_network_status replicaset_container_host_pid replicaset_container_host_pid_count replicaset_container_host_pid_status replicaset_count replicaset_default_namespace replicaset_default_namespace_count replicaset_default_namespace_status replicaset_ha replicaset_host_table replicaset_input replicaset_labels replicaset_overview replicaset_pods_detail replicaset_replicas_detail replicaset_tree replicasets_for_deployment replicasets_for_namespace replicasets_for_pod replicasets_for_service role_annotations role_bindings_for_namespace role_bindings_for_rbac role_bindings_for_role role_bindings_for_service_account role_default_namespace role_input role_labels role_overview role_rules_count role_rules_detail role_rules_for_cluster_role roles_for_namespace roles_for_rbac roles_for_service_account secrets_for_container secrets_for_pod secrets_for_service_account service_1_year_count service_24_hours_count service_30_90_days_count service_30_days_count service_90_365_days_count service_account_annotations service_account_automount_token service_account_default_namespace service_account_input service_account_labels service_account_overview service_account_rules_detail service_accounts_for_cluster_role service_accounts_for_pod service_accounts_for_rbac service_accounts_for_role service_age_table service_annotations service_by_context service_by_context_name service_by_creation_month service_by_namespace service_by_type service_count service_default_namespace service_default_namespace_count service_default_namespace_status service_input service_ip_details service_labels service_overview service_pods_detail service_ports service_tree service_type services_for_deployment services_for_namespace services_for_replicaset services_for_statefulset statefulset_1_year_count statefulset_24_hours_count statefulset_30_90_days_count statefulset_30_days_count statefulset_90_365_days_count statefulset_age_table statefulset_annotations statefulset_by_context statefulset_by_context_name statefulset_by_creation_month statefulset_by_namespace statefulset_conditions statefulset_container_host_ipc statefulset_container_host_ipc_count statefulset_container_host_ipc_status statefulset_container_host_network statefulset_container_host_network_count statefulset_container_host_network_status statefulset_container_host_pid statefulset_container_host_pid_count statefulset_container_host_pid_status statefulset_containers statefulset_count statefulset_default_namespace statefulset_default_namespace_count statefulset_default_namespace_status statefulset_host_table statefulset_input statefulset_labels statefulset_overview statefulset_pods_detail statefulset_replicas statefulset_replicas_detail statefulset_service_name statefulset_strategy statefulset_tree statefulsets_for_namespace statefulsets_for_pod statefulsets_for_service volumes_for_node

Query: container_allow_privilege_escalation_count

Usage

powerpipe query kubernetes_insights.query.container_allow_privilege_escalation_count

Steampipe Tables

Kubernetes plugin

SQL

select
  count(c ->> 'name') as value,
  'Privilege Escalation Enabled' as label,
  case
    count(c ->> 'name')
    when 0 then 'ok'
    else 'alert'
  end as type
from
  kubernetes_pod,
  jsonb_array_elements(containers) as c
where
  c -> 'securityContext' ->> 'allowPrivilegeEscalation' = 'true';

Dashboards

The query is used in the dashboards:

Kubernetes Container Dashboard