TF 0466 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Non-core volume types used.

Property Value
Language terraform
Severity low

Description

The configuration uses non-core (disallowed) Kubernetes volume types in pod specifications, which do not meet the Pod Security Standards for restricted environments. This increases exposure to less secure or deprecated storage backends.

Impact

Using disallowed volume types can introduce security risks such as data leakage, privilege escalation, or access to sensitive host resources, potentially allowing attackers to compromise the cluster or access unauthorized data.

Resolution

Do not Set 'spec.volumes[*]' to any of the disallowed volume types.