services / Google Cloud / Services

Services provide a stable network endpoint for one or more pods, allowing them to be accessed by other pods or external clients.

Services control how your Kubernetes Pods are exposed on the Kubernetes network.

container.​services.​getStatus

While this is a different permission from `services.get`, calling the `GET api/v1/namespaces/default/services/{{service-name}}/status` endpoint retrieves the same information as the `GET api/v1/namespaces/default/services/{{service-name}}` endpoint.

Risks

1. Network discovery (LOW)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links