Pods often require access data (access tokens) for Kubernetes. Through an attack on a pod, this access data can fall into unauthorised hands. With these credentials, it is possible for an attacker to interact with the control plane in an authenticated manner. With sufficient permissions, they can also make changes to the orchestration.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)