GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

dockerRegistry

package

v1.8.2 Latest Latest Go to latest Published: Oct 1, 2025 License: Apache-2.0 Imports: 25 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/devtron-labs/devtron

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func BuildIpsData(dockerRegistryUrl, dockerRegistryUsername, dockerRegistryPassword, ... string) map[string][]byte
func BuildIpsName(dockerRegistryId string, ipsCredentialType string, ipsCredentialValue string) string
func CheckIfImagePullSecretAccessProvided(appliedClusterIdsCsv string, ignoredClusterIdsCsv string, clusterId int, ...) bool
func CreateCredentialForEcr(awsRegion, awsAccessKey, awsSecretKey string) (string, string, error)
func GetUsernamePasswordFromIpsSecret(dockerRegistryUrl string, data map[string][]byte) (string, string)
func SetIpsNameInValues(valuesContent []byte, ipsName string) ([]byte, error)
type DockerIpsCustomCredential
type DockerRegistryIpsConfigService
type DockerRegistryIpsConfigServiceImpl
- func NewDockerRegistryIpsConfigServiceImpl(logger *zap.SugaredLogger, ...) *DockerRegistryIpsConfigServiceImpl
- func (impl DockerRegistryIpsConfigServiceImpl) HandleImagePullSecretOnApplicationDeployment(ctx context.Context, environment *repository2.Environment, ...) ([]byte, error)
- func (impl DockerRegistryIpsConfigServiceImpl) IsImagePullSecretAccessProvided(dockerRegistryId string, clusterId int, isVirtualEnv bool) (bool, error)

Constants ¶

View Source

const ALL_CLUSTER_ID string = "-1"

View Source

const IMAGE_PULL_SECRET_KEY_IN_VALUES_YAML = "imagePullSecrets"

View Source

const IPS_CREDENTIAL_TYPE_CUSTOM_CREDENTIAL = "CUSTOM_CREDENTIAL"

View Source

const IPS_CREDENTIAL_TYPE_NAME = "NAME"

View Source

const IPS_CREDENTIAL_TYPE_SAME_AS_REGISTRY = "SAME_AS_REGISTRY"

Variables ¶

This section is empty.

Functions ¶

func BuildIpsData ¶

func BuildIpsData(dockerRegistryUrl, dockerRegistryUsername, dockerRegistryPassword, dockerRegistryEmail string) map[string][]byte

func BuildIpsName ¶

func BuildIpsName(dockerRegistryId string, ipsCredentialType string, ipsCredentialValue string) string

eg: quayio-dtron-ips

func CheckIfImagePullSecretAccessProvided ¶

func CheckIfImagePullSecretAccessProvided(appliedClusterIdsCsv string, ignoredClusterIdsCsv string, clusterId int, isVirtualEnv bool) bool

func CreateCredentialForEcr ¶

func CreateCredentialForEcr(awsRegion, awsAccessKey, awsSecretKey string) (string, string, error)

returns username and password

func GetUsernamePasswordFromIpsSecret ¶

func GetUsernamePasswordFromIpsSecret(dockerRegistryUrl string, data map[string][]byte) (string, string)

func SetIpsNameInValues ¶

func SetIpsNameInValues(valuesContent []byte, ipsName string) ([]byte, error)

Types ¶

type DockerIpsCustomCredential ¶

type DockerIpsCustomCredential struct {
	Server   string `json:"server"`
	Username string `json:"username"`
	Password string `json:"password"`
	Email    string `json:"email"`
}

type DockerRegistryIpsConfigService ¶

type DockerRegistryIpsConfigService interface {
	IsImagePullSecretAccessProvided(dockerRegistryId string, clusterId int, isVirtualEnv bool) (bool, error)
	HandleImagePullSecretOnApplicationDeployment(ctx context.Context, environment *repository2.Environment, artifact *repository3.CiArtifact, ciPipelineId int, valuesFileContent []byte) ([]byte, error)
}

type DockerRegistryIpsConfigServiceImpl ¶

type DockerRegistryIpsConfigServiceImpl struct {
	// contains filtered or unexported fields
}

func NewDockerRegistryIpsConfigServiceImpl ¶

func NewDockerRegistryIpsConfigServiceImpl(logger *zap.SugaredLogger, dockerRegistryIpsConfigRepository repository.DockerRegistryIpsConfigRepository,
	k8sUtil *k8s.K8sServiceImpl,
	dockerArtifactStoreRepository repository.DockerArtifactStoreRepository,
	clusterReadService read.ClusterReadService,
	ciPipelineConfigReadService ciConfig.CiPipelineConfigReadService) *DockerRegistryIpsConfigServiceImpl

func (DockerRegistryIpsConfigServiceImpl) HandleImagePullSecretOnApplicationDeployment ¶

func (impl DockerRegistryIpsConfigServiceImpl) HandleImagePullSecretOnApplicationDeployment(ctx context.Context, environment *repository2.Environment, artifact *repository3.CiArtifact, ciPipelineId int, valuesFileContent []byte) ([]byte, error)

func (DockerRegistryIpsConfigServiceImpl) IsImagePullSecretAccessProvided ¶

func (impl DockerRegistryIpsConfigServiceImpl) IsImagePullSecretAccessProvided(dockerRegistryId string, clusterId int, isVirtualEnv bool) (bool, error)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL