Overview

FieldValue
ID1056
NameManage StorageClasses
Risk CategoryTampering
Risk LevelHigh
Role TypeClusterRole
API Groupsstorage.k8s.io
Resourcesstorageclasses
Verbscreate, update, patch, delete
TagsDenialOfService StorageManipulation Tampering

Description

Grants permission to create, update, or delete StorageClasses. StorageClasses define how dynamic provisioning of persistent volumes occurs. Tampering with StorageClasses can lead to denial of service (e.g., by making storage provisioning fail) or misconfiguration of storage resources.