Kubetier
← Permission Reference
T2

create horizontalpodautoscalers

Creating a HorizontalPodAutoscaler with a high minReplicas floor forces a target workload to scale up at once, with no metrics-server required, driving resource exhaustion or multiplying the replicas of a privileged pod template.

API Group
autoscaling
Scope
namespaced
Audit Level
Request

Escalation Paths

  1. Create a HorizontalPodAutoscaler targeting a workload with a high minReplicas floor

  2. The controller scales the target to minReplicas immediately, with no metrics-server or metric data required

  3. Used for resource exhaustion, or to multiply the replicas of a workload whose pod template already carries elevated privileges

Additional rights needed:

none
K8s docs ↗
K8s docs ↗