Evict Pods cluster-wide
Denial of Service
Medium
Overview
| Field | Value |
|---|---|
| ID | 1057 |
| Name | Evict Pods cluster-wide |
| Risk Category | Denial of Service |
| Risk Level | Medium |
| Role Type | ClusterRole |
| API Groups | policy |
| Resources | pods/eviction |
| Verbs | create |
| Tags | DenialOfService WorkloadLifecycle |
Description
Permits evicting (deleting) pods across all namespaces using the eviction API. This can be used to cause denial of service by disrupting running applications throughout the cluster.