CVE-2024-3177: Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

[pacoxu]

Affected Versions
kube-apiserver v1.29.0 - v1.29.3
kube-apiserver v1.28.0 - v1.28.8
kube-apiserver <= v1.27.12

kubernetes/kubernetes#124322

[github-actions]

Hi @pacoxu,
Thanks for opening an issue!
We will look into it as soon as possible.

Details

Instructions for interacting with me using comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the [gh-ci-bot](https://github.com/wzshiming/gh-ci-bot) repository.