The “Read sensitive file untrusted” event in a Kubernetes cluster indicates that a process running within a container attempted to read a file that contains sensitive information, such as passwords, private keys, or configuration files.
This event suggests that there might be a potential security breach or unauthorized access to sensitive data within the cluster.
It is crucial to investigate this event promptly to identify the source of the unauthorized access and take appropriate actions to mitigate the risk, such as reviewing access controls, securing the sensitive files, and monitoring for any further suspicious activities.