An adversary may add additional roles or permissions to an adversary-controlled user or service account to maintain persistent access to a container orchestration system.

Tactics
TA0003 TA0004

Sub-technique of
T1098


See: MITRE ATT&CK