services / Google Cloud / Kubernetes Engine StatefulSets

Control Kubernetes StatefulSets objects in a given cluster.

StatefulSets manage Pods, with different guarantees but similar to Deployments, ReplicaSets, and DaemonSets. As such, the primary security concerns are the container images that are running on these Pods, and the resources the Pods consume from the Kubernetes cluster.

container.​statefulSets.​get

Describes detailed metadata about the StatefulSet, and Pods and Containers in it, such as ports, IP address, replicas, attached volumes, containers and the images they are running.

Risks

1. Infrastructure discovery (LOW)
2. Network discovery (LOW)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.