2/3 attacks on role bind (#134)

* 2/3 attacks on role bind * pr comments * wip * gitignore * typo * fix containers unit tests * docs * wip * linter * updating docs * adding comments/typo * docs * excalidraw * mongo opti * PR comment * fix container generation * fixing system-tests * fix gen structs
DataDog · Oct 31, 2023 · 9de96f1 · 9de96f1
1 parent db78c5e
commit 9de96f1
Show file tree

Hide file tree

Showing 25 changed files with 40,970 additions and 236 deletions.
diff --git a/.gitignore b/.gitignore
@@ -54,4 +54,7 @@ scripts/collectors/
 deployments/kubehound/kubegraph/dsl/kubehound/target
 
 # personal settings
-.vscode/settings.json
+.vscode/settings.json
+
+# RBAC certificates
+test/setup/test-cluster/RBAC/
diff --git a/deployments/kubehound/kubegraph/kubehound-db-init.groovy b/deployments/kubehound/kubegraph/kubehound-db-init.groovy
@@ -53,7 +53,7 @@ mgmt.addConnection(idAssume, node, identity);
 idImpersonate = mgmt.makeEdgeLabel('IDENTITY_IMPERSONATE').multiplicity(MANY2ONE).make();
 mgmt.addConnection(idImpersonate, permissionSet, identity);
 
-roleBind = mgmt.makeEdgeLabel('ROLE_BIND').multiplicity(MANY2ONE).make();
+roleBind = mgmt.makeEdgeLabel('ROLE_BIND').multiplicity(MULTI).make();
 mgmt.addConnection(roleBind, permissionSet, permissionSet);
 
 podAttach = mgmt.makeEdgeLabel('POD_ATTACH').multiplicity(ONE2MANY).make();