/LOLPaths
Kubernetes

Kubernetes Service Account Token

Mounted Kubernetes service account tokens can authenticate workloads to the API server.

Metadata

  • id: kubernetes.service-account-token
  • category: kubernetes
  • sensitivity: critical
  • artifact types: credential, token
  • tags: kubernetes, service-account

Path Matchers

PathKindPlatforms
/var/run/secrets/kubernetes.io/serviceaccount/tokenfilelinux
/run/secrets/kubernetes.io/serviceaccount/tokenfilelinux

Credential Types

  • bearer-token

Impact

  • credential_access
  • remote_access

References

Kubernetes Service Account Namespace

Mounted Kubernetes service account namespace files reveal the namespace used for in-cluster API requests.

Cargo Registry Credentials

Cargo registry credential files can contain tokens for publishing Rust crates or authenticating to private registries.

On this page

MetadataPath MatchersCredential TypesImpactReferences