Skip to main content

​
More Info:

The Kubernetes API stores secrets, which may be service account tokens for the Kubernetes API or credentials used by workloads in the cluster. Access to these secrets should be restricted to the smallest possible group of users to reduce the risk of privilege escalation.

​
Risk Level

High

​
Address

Security

​
Compliance Standards

  • CIS Kubernetes

​
Triage and Remediation

​
Remediation

Using Console

Review the users who have get, list or watch access to secrets objects in theKubernetes API.