services / Google Cloud / Kubernetes Engine DaemonSets
Control Kubernetes DaemonSets objects in a given cluster.
DaemonSets manage pods, similar to ReplicaSets and StatefulSets. A DaemonSet ensures there is the desired number of pods running on each node. If DaemonSets are allowed to connect to the public internet, it may open up the door for arbitrary code execution for an attacker. See notes on `container/deployments` for mitigations.
container.daemonSets.get
Describes detailed metadata about the DaemonSet, and Pods and Containers in it, such as ports, IP address, replicas, attached volumes, containers and the images they are running.
Risks
Scope: CRITICAL
This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.
Contributed by P0 Security