Skip to main content

​
More Info:

The ability to create pods in a namespace can provide a number of opportunities for privilege escalation, such as assigning privileged service accounts to these pods or mounting hostPaths with access to sensitive data (unless Pod Security Policies are implemented to restrict this access)

​
Risk Level

Low

​
Address

Security

​
Compliance Standards

  • CIS Kubernetes

​
Triage and Remediation

​
Remediation

Using Console

Review the users who have create access to pod objects in the Kubernetes API.