T3system:basic-usercluster
Minimal self-introspection access for authenticated users.
Allows checking your own identity and effective permissions.
- →
Bound to the 'system:authenticated' group by default; every authenticated user has this.
- →
SelfSubjectAccessReview/SelfSubjectRulesReview lets users enumerate their own permissions, which attackers use to map available attack surface.
Permissions (2)
| apiGroup | resources / urls | verbs |
|---|---|---|
| authorization.k8s.io | selfsubjectaccessreviews, selfsubjectrulesreviews | create |
| authentication.k8s.io | selfsubjectreviews | create |
Audit: NoneK8s docs ↗