ARIA assesses this issue as MEDIUM severity because it primarily affects IP address consumption rather than security, though it can impact operational efficiency and scalability. Real-world exploitability is low since it's an efficiency concern rather than a security vulnerability.
The S3 CSI driver v2 introduces Mountpoint pods that consume significant VPC IP addresses at scale, affecting clusters with high deployment counts. This impacts the efficiency and scalability of AWS EKS clusters.
Affected Systems
- S3 CSI driver v2
Affected Versions: v2 of the S3 CSI driver
Remediation
- Reduce the number of Mountpoint pods by optimizing deployment configurations or consolidating mounts where possible.
- Consider using alternative methods for storing heap dumps, such as local storage solutions that sync to S3 post-deployment.
- Apply any patches or updates released by the S3 CSI driver maintainers addressing this issue.
Stack Impact
This affects Kubernetes deployments specifically on AWS EKS clusters utilizing the S3 CSI driver for managing heap dumps in Java applications.