Affected by GO-2024-3260 and 1 other vulnerabilities

GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

argo

package

v0.4.28 Latest Latest Go to latest Published: Aug 25, 2022 License: Apache-2.0 Imports: 20 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/devtron-labs/devtron

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
type ArgoUserService
type ArgoUserServiceImpl
- func NewArgoUserServiceImpl(Logger *zap.SugaredLogger, clusterService cluster.ClusterService, ...) (*ArgoUserServiceImpl, error)
type DevtronSecretConfig
- func GetDevtronSecretName() (*DevtronSecretConfig, error)
type HelmUserServiceImpl
- func NewHelmUserServiceImpl(Logger *zap.SugaredLogger) (*HelmUserServiceImpl, error)
- func (impl *HelmUserServiceImpl) GetLatestDevtronArgoCdUserToken() (string, error)

Constants ¶

View Source

const (
	DEVTRON_USER                     = "devtron"
	DEVTRONCD_NAMESPACE              = "devtroncd"
	ARGOCD_CM                        = "argocd-cm"
	ARGOCD_SECRET                    = "argocd-secret"
	ARGO_USER_APIKEY_CAPABILITY      = "apiKey"
	ARGO_USER_LOGIN_CAPABILITY       = "login"
	DEVTRON_ARGOCD_USERNAME_KEY      = "DEVTRON_ACD_USER_NAME"
	DEVTRON_ARGOCD_USER_PASSWORD_KEY = "DEVTRON_ACD_USER_PASSWORD"
	DEVTRON_ARGOCD_TOKEN_KEY         = "DEVTRON_ACD_TOKEN"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type ArgoUserService ¶

type ArgoUserService interface {
	GetLatestDevtronArgoCdUserToken() (string, error)
}

type ArgoUserServiceImpl ¶

type ArgoUserServiceImpl struct {
	// contains filtered or unexported fields
}

func NewArgoUserServiceImpl ¶

func NewArgoUserServiceImpl(Logger *zap.SugaredLogger,
	clusterService cluster.ClusterService,
	acdSettings *settings.ArgoCDSettings,
	devtronSecretConfig *DevtronSecretConfig,
	runTimeConfig *client.RuntimeConfig) (*ArgoUserServiceImpl, error)

func (*ArgoUserServiceImpl) CreateNewArgoCdTokenForDevtron ¶

func (impl *ArgoUserServiceImpl) CreateNewArgoCdTokenForDevtron(username, password string, tokenNo int, k8sClient *v1.CoreV1Client) (string, error)

func (*ArgoUserServiceImpl) CreateNewArgoCdUser ¶

func (impl *ArgoUserServiceImpl) CreateNewArgoCdUser(username, password string, capabilities []string, k8sClient *v1.CoreV1Client) error

func (*ArgoUserServiceImpl) CreateNewArgoCdUserForDevtron ¶

func (impl *ArgoUserServiceImpl) CreateNewArgoCdUserForDevtron(k8sClient *v1.CoreV1Client) (string, string, error)

func (*ArgoUserServiceImpl) CreateTokenForArgoCdUser ¶

func (impl *ArgoUserServiceImpl) CreateTokenForArgoCdUser(username, password string) (string, error)

func (*ArgoUserServiceImpl) GetLatestDevtronArgoCdUserToken ¶

func (impl *ArgoUserServiceImpl) GetLatestDevtronArgoCdUserToken() (string, error)

func (*ArgoUserServiceImpl) UpdateArgoCdUserDetail ¶

func (impl *ArgoUserServiceImpl) UpdateArgoCdUserDetail()

func (*ArgoUserServiceImpl) UpdateArgoCdUserInfoInDevtronSecret ¶

func (impl *ArgoUserServiceImpl) UpdateArgoCdUserInfoInDevtronSecret(userinfo map[string]string, k8sClient *v1.CoreV1Client) error

type DevtronSecretConfig ¶

type DevtronSecretConfig struct {
	DevtronSecretName string `env:"DEVTRON_SECRET_NAME" envDefault:"devtron-secret"`
}

func GetDevtronSecretName ¶

func GetDevtronSecretName() (*DevtronSecretConfig, error)

type HelmUserServiceImpl ¶

type HelmUserServiceImpl struct {
	// contains filtered or unexported fields
}

func NewHelmUserServiceImpl ¶

func NewHelmUserServiceImpl(Logger *zap.SugaredLogger) (*HelmUserServiceImpl, error)

func (*HelmUserServiceImpl) GetLatestDevtronArgoCdUserToken ¶

func (impl *HelmUserServiceImpl) GetLatestDevtronArgoCdUserToken() (string, error)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL