18.5. Common search queries


Here are some common search queries you can run with Red Hat Advanced Cluster Security for Kubernetes.

18.5.1. Finding deployments that are affected by a specific CVE

Expand
QueryExample

CVE:<CVE_number>

CVE:CVE-2018-11776

18.5.2. Finding privileged running deployments

Expand
QueryExample

Privileged:<true_or_false>

Privileged:true

18.5.3. Finding deployments that have external network exposure

Expand
QueryExample

Exposure Level:<level>

Exposure Level:External

18.5.4. Finding deployments that are running specific processes

Expand
QueryExample

Process Name:<process_name>

Process Name:bash

18.5.5. Finding deployments that have serious but fixable vulnerabilities

Expand
QueryExample

CVSS:<expression_and_score>

CVSS:>=6 Fixable:.*

18.5.6. Finding deployments that use passwords exposed through environment variables

Expand
QueryExample

Environment Key:<query>

Environment Key:r/.*pass.*

18.5.7. Finding running deployments that have particular software components in them

Expand
QueryExample

Component:<component_name>

Component:libgpg-error or Component:sudo

18.5.8. Finding users or groups

Use Kubernetes Labels and Selectors, and Annotations to attach metadata to your deployments. You can then query based on the applied annotations and labels to identify individuals or groups.

18.5.8.1. Finding who owns a particular deployment

Expand
QueryExample

Deployment:<deployment_name> Label:<key_value> or Deployment:<deployment_name> Annotation:<key_value>

Deployment:app-server Label:team=backend

18.5.8.2. Finding who is deploying images from public registries

Expand
QueryExample

Image Registry:<registry_name> Label:<key_value> or Image Registry:<registry_name> Annotation:<key_value>

Image Registry:docker.io Label:team=backend

18.5.8.3. Finding who is deploying into the default namespace

Expand
QueryExample

Namespace:default Label:<key_value> or Namespace:default Annotation:<key_value>

Namespace:default Label:team=backend

Red Hat logoGithubredditYoutubeTwitter

자세한 정보

평가판, 구매 및 판매

커뮤니티

Red Hat 소개

Red Hat은 기업이 핵심 데이터 센터에서 네트워크 에지에 이르기까지 플랫폼과 환경 전반에서 더 쉽게 작업할 수 있도록 강화된 솔루션을 제공합니다.

보다 포괄적 수용을 위한 오픈 소스 용어 교체

Red Hat은 코드, 문서, 웹 속성에서 문제가 있는 언어를 교체하기 위해 최선을 다하고 있습니다. 자세한 내용은 다음을 참조하세요.Red Hat 블로그.

Red Hat 문서 정보

Legal Notice

Theme

© 2026 Red Hat
맨 위로 이동