services / Azure / Kubernetes secrets (fleet)

Kubernetes Secret objects within an AKS fleet namespace, which store credential material such as service-account tokens, TLS keys, passwords, connection strings, and registry credentials consumed by workloads.

Holds live credential/cryptographic material; compromise yields identity takeover and lateral movement across the cluster and connected systems.

Microsoft.​ContainerService/​fleets/​secrets/​delete

Deleting Secrets destroys stored cryptographic/credential material, breaking authentication for dependent workloads and disrupting the services that consume those secrets.

Risks

1. Cryptographic destruction (CRITICAL)
2. Denial-of-service (HIGH)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links