Velero is an open-source Kubernetes disaster-recovery and migration tool that backs up Kubernetes resources and, when configured, persistent-volume data, then restores those backups to a cluster. Backup metadata is stored in a configured BackupStorageLocation; volume snapshots use separately configured VolumeSnapshotLocations, while supported file-system backup/data-mover paths store volume data in object storage. In an authorized adversary simulation, a principal with the required Kubernetes RBAC and storage permissions could use Velero to stage selected cluster data in a configured destination. Whether that is exfiltration depends on who controls and can access the destination and which resources were selected.
Go
RESTRICTED_ACCESS_BLUR_MARKER