Overview

FieldValue
ID1096
NameUpdate Deployment Scale (Resource Abuse/DoS)
Risk CategoryDenial of Service
Risk LevelHigh
Role TypeRole
API Groupsapps
Resourcesdeployments/scale
Verbsupdate, patch
TagsDenialOfService ResourceModification Tampering WorkloadLifecycle

Description

Allows updating the ‘scale’ subresource of Deployments within a namespace. This can be abused to significantly increase or decrease the number of replicas for a deployment, potentially leading to resource exhaustion, denial of service, or unexpected operational costs.