Kubernetes
Kubernetes Service Account CA Certificate
Mounted Kubernetes service account CA certificates identify the cluster API trust root and support in-cluster API discovery.
Metadata
- id:
kubernetes.service-account-ca-certificate - category:
kubernetes - sensitivity:
medium - artifact types:
certificate,configuration - tags:
kubernetes,service-account,certificate
Path Matchers
| Path | Kind | Platforms |
|---|---|---|
/var/run/secrets/kubernetes.io/serviceaccount/ca.crt | file | linux |
/run/secrets/kubernetes.io/serviceaccount/ca.crt | file | linux |
Impact
discovery
References
Kubernetes Kubeconfig
Kubernetes client configuration may contain cluster endpoints, client certificates, bearer tokens, or references to authentication material.
Kubernetes Service Account Namespace
Mounted Kubernetes service account namespace files reveal the namespace used for in-cluster API requests.