The service can manage the installation and lifecycle of supported extensions for networking, storage, policy, observability, and workload management.
Managed Cluster Extensions
CCC.K8S.CP14
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.K8S.TH08 | Cluster Extensions Execute Untrusted Code | An operator, controller, admission webhook, or managed extension installed without verified provenance and constrained permissions may execute untrusted code with cluster-level access. The extension can intercept sensitive data, rewrite cluster state, or interrupt workloads across its granted scope. |
| CCC.K8S.TH13 | Controllers Reconcile Unauthorized Cluster State | A controller or scheduled workload granted excessive scope may repeatedly create or restore unauthorized resources and configuration through its reconciliation loop. Manual remediation can then be overwritten, restoring unsafe cluster state that exposes workload data or interferes with service availability. |