Skip to main content

Kubernetes Storage Provisioning

CCC.K8S.CP13

The service can dynamically provision ephemeral and persistent workload storage through Kubernetes container storage interface integrations.

Related Threats

IDTitleDescription
CCC.K8S.TH11Persistent Volumes are Bound to Unauthorized WorkloadsMisconfigured persistent-volume claims, storage classes, or workload authorization may allow a volume to be mounted outside its intended ownership boundary. Data stored on the volume can then be read, modified, or deleted through the unauthorized workload, directly reducing its confidentiality, integrity, and availability.