Half-blind: SSRF in Kubernetes dynamic provisioning via StorageClass parameters
kube-controller-manager will connect to any address you write into a StorageClass, and until 2020 it read the response back to you in a PersistentVolumeClaim event.
found by Brice Augras (Groupe-Asten) and Christophe Hauquiert (Nokia)