Identifying Blast Radius

Configuration in Kubernetes is highly reusable. A small change can cause unintended consequences.

Kubevious identifies shared configurations and also displays other dependent objects. A single glance is enough to identify the cascading effects of a particular change. In the screenshot below, the ConfigMap kube-dns is mounted as volume in both dnsmasq and kubedns containers.

Shared Config Map

The SharedBy flag works with other objects such as Secrets, Roles, Binding, ServiceAccounts and Network Policies.

Shared RBAC Role Binding and ServiceAccount

Share this article on: