Tiller Service Is Not Deleted

Query id: 8b862ca9-0fbd-4959-ad72-b6609bdaa22d
Query name: Tiller Service Is Not Deleted
Platform: Kubernetes
Severity: High
Category: Insecure Configurations
CWE: 665
URL: Github

Description¶

Check if there is any Tiller Service present
Documentation

Code samples¶

Code samples with security vulnerabilities¶

Positive test num. 1 - yaml file

apiVersion: v1
kind: Service
metadata:
  name: tiller-deploy
  labels:
    app: helm
    name: tiller
spec:
  type: ClusterIP
  selector:
    app: helm
    name: tiller
  ports:
  - name: tiller
    port: 44134
    protocol: TCP
    targetPort: tiller

Code samples without security vulnerabilities¶

Negative test num. 1 - yaml file

apiVersion: v1
kind: Service
metadata:
  name: some-service
  labels:
    name: some-label
spec:
  ports:
    - protocol: TCP
      port: 80
      targetPort: 9376