The service can expose and route internal or external traffic to Kubernetes workloads through services, load balancers, ingress controllers, and gateway components.
Workload Traffic Routing
CCC.K8S.CP08
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.K8S.TH10 | Workload Endpoints are Exposed Unintentionally | Services, load balancers, ingress resources, or gateways configured with an unintended external scope may make workload endpoints reachable from untrusted networks. Exposed services can then disclose workload data, accept unauthorized changes, or consume capacity needed by legitimate users. |