gcp-gke-workload-literal-environment-values
Pod templates can persist literal credentials in environment variable values.
Where it sits
| location | Kubernetes workload GET/LIST.PodSpec.containers[].env[].value |
|---|
| location kind | environment_variable |
|---|
| data kinds | credential password api_key access_key secret_key oauth_token connection_string |
|---|
| emits edge | ContainsCredential |
|---|
| service | GKE (gcp:gke) |
|---|
Collection recipe
| access mode | data_plane |
|---|
| operation | Kubernetes workload GET/LIST |
|---|
| response path | PodSpec.containers[].env[].value |
|---|
| encoding | list |
|---|
| params | {"name": "\u003cresource-name\u003e"} |
|---|
Required permissions
container.clusters.get
References