← Permission Reference
T3
get configmaps
ConfigMaps are not meant for secrets, but misconfigured applications and operators often store credentials in them, so ConfigMap data can expose them directly.
Also helps locate high-value config like kubeadm-config.
Contextual upgrade to T2:
ConfigMap contains sensitive configuration such as database connection strings or internal service credentials
- API Group
- (core)
- Scope
- namespaced
- Audit Level
- Metadata