Kubernetes

Kubernetes Kubeconfig

Kubernetes client configuration may contain cluster endpoints, client certificates, bearer tokens, or references to authentication material.

Metadata

id: kubernetes.kubeconfig
category: kubernetes
sensitivity: critical
artifact types: configuration, credential
tags: kubernetes, kubeconfig

Path Matchers

Path	Kind	Platforms
`%USERPROFILE%\.kube\config`	`file`	`windows`
`$HOME/.kube/config`	`file`	`linux`, `macos`
`/etc/kubernetes/admin.conf`	`file`	`linux`
`/etc/kubernetes/kubelet.conf`	`file`	`linux`
`/etc/kubernetes/controller-manager.conf`	`file`	`linux`
`/etc/kubernetes/scheduler.conf`	`file`	`linux`

Content Indicators

Literal strings:

apiVersion:
clusters:
contexts:

Credential Types

bearer-token
certificate
private-key

Impact

credential_access
remote_access

References

Kubernetes Kubeconfig Files

Helm Home Directory

Helm home directories can contain repository credentials, TLS files, chart cache data, and cluster-related configuration.

Kubernetes Service Account CA Certificate

Mounted Kubernetes service account CA certificates identify the cluster API trust root and support in-cluster API discovery.

On this page

Metadata Path Matchers Content Indicators Credential Types Impact References