services / Google Cloud / Kubernetes Engine Services
Services provide a stable network endpoint for one or more pods, allowing them to be accessed by other pods or external clients.
Services control how your Kubernetes Pods are exposed on the Kubernetes network.
container.services.delete
Deleting a service may disrupt communication to Pods, taking down an application completely.
Risks
Scope: CRITICAL
This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.
Links
Contributed by P0 Security
© 2023–present P0 Security and contributors to the IAM Privilege Catalog