services / Google Cloud / Services

Services provide a stable network endpoint for one or more pods, allowing them to be accessed by other pods or external clients.

Services control how your Kubernetes Pods are exposed on the Kubernetes network.

container.​services.​get

Retrieve status information such as Pod selector, IP (virtual), port. Additionally, load-balancer information is returned, if any: public IP, port, host name.

Risks

1. Network discovery (LOW)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links