Proxy an HTTP request through the API server to a known Pod name and port
Reach an internal admin, debug, metrics, or application endpoint not exposed externally.
NetworkPolicies do not apply to API-server-proxied traffic
Extract credentials or invoke privileged application actions via the unauthenticated internal endpoint
Note:
This reaches T0 when the Pod runs as a high-privilege SA and exposes a debug endpoint that returns its mounted token or allows token-issuing actions.