GO-2024-3039: Kubean vulnerable to cluster-level privilege escalation in github.com/kubean-io/kubean
module
Version:
v0.1.0
Opens a new window with list of versions in this module.
Published: Aug 16, 2022
License: Apache-2.0
Opens a new window with license information.
README
¶
🌱 KuBean
Introduction
kubean is a cluster lifecycle management tool based on kubespray.
Quick Start
Deploy Kubean-Operator
helm repo add kubean-io https://kubean-io.github.io/kubean-helm-chart/
helm install kubean kubean-io/kubean --create-namespace -n kubean-system
Then check kubean-operator status by kubectl get pods -n kubean-system | grep 'kubean'
.
Start KuBeanClusterOps for cluster.yml playbook
We cloud use the example in folder artifacts/demo
which uses online resources to install k8s cluster.
cd artifacts
- modify
demo/hosts-conf-cm.yml
by replacing IP1
, IP2
... with the real ip where we want to install k8s cluster
kubectl apply -f demo
to start kubeanClusterOps which will start the kubespray job
kubectl get job -n kubean-system
to check the kubespray job status
Offline Usage
offline
Directories
¶
Click to show internal directories.
Click to hide internal directories.