services / Google Cloud / Kubernetes Engine StatefulSets

Control Kubernetes StatefulSets objects in a given cluster.

StatefulSets manage Pods, with different guarantees but similar to Deployments, ReplicaSets, and DaemonSets. As such, the primary security concerns are the container images that are running on these Pods, and the resources the Pods consume from the Kubernetes cluster.

container.​statefulSets.​list

Allows listing all StatefulSets in a namespace.

Risks

1. Infrastructure discovery (LOW)
2. Network discovery (LOW)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.