services / Google Cloud / Kubernetes Engine Clusters

Manages Kubernetes clusters on Google Kubernetes Engine

One independent instance of a Kubernetes cluster, consisting of a node-pool and the Kubernetes objects such as deployments, statefulsets, pods, jobs that represents workloads and configuration running on the cluster, managed by Kubernetes.


Attach a tag to a cluster as a key-value pair. Tags can conditionally allow or deny policies.



This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.


  • https:​/​/​cloud.​google.​com/​kubernetes-​engine/​docs/​how-​to/​tags#​overview
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog