Kubernetes Kubeconfig Bearer Token

Description

General

• Documentation: https://kubernetes.io/docs/reference/config-api/kubeconfig.v1/
• Summary: Kubernetes is a system for automating deployment, scaling and management of containerized applications. A kubeconfig file holds the address of one or more clusters and the credentials to reach them. This detector catches the opaque bearer tokens stored in kubeconfig users, together with the API server they authenticate to. These tokens grant access to the cluster with the permissions of their user.

Revoke the secret

Revoke the token on the cluster that issued it: delete the service account token Secret, the bootstrap token, or the OpenShift OAuth access token, or remove the entry from the static token file of the API server.

Details for Kubernetes Kubeconfig Bearer Token

• Family: token

• Category: other

• Company: Kubernetes

• High recall: False

• Validity check available: True

• Analyzer available: False

• Revoker available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Occurrences found for one million commits: 0.48

• Prefixed: False