services / Google Cloud / Kubernetes Engine StatefulSets

Control Kubernetes StatefulSets objects in a given cluster.

StatefulSets manage Pods, with different guarantees but similar to Deployments, ReplicaSets, and DaemonSets. As such, the primary security concerns are the container images that are running on these Pods, and the resources the Pods consume from the Kubernetes cluster.


If properties other than replicas are updated in the PATCH request, those are quietly ignored. Secondly, increasing the replica count in StatefulSets may disrupt stateful service and/or drain the limited resources available to other Kubernetes workloads.



This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Contributed by P0 Security

© 2023–present P0 Security and contributors to the IAM Privilege Catalog