GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

dockerRegistry

package

v0.6.9-rc.2 Latest Latest Go to latest Published: Dec 9, 2022 License: Apache-2.0 Imports: 21 Imported by: 4

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/devtron-labs/devtron

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func BuildIpsData(dockerRegistryUrl, dockerRegistryUsername, dockerRegistryPassword, ... string) map[string][]byte
func BuildIpsName(dockerRegistryId string, ipsCredentialType string, ipsCredentialValue string) string
func CheckIfImagePullSecretAccessProvided(appliedClusterIdsCsv string, ignoredClusterIdsCsv string, clusterId int) bool
func CreateCredentialForEcr(awsRegion, awsAccessKey, awsSecretKey string) (string, string, error)
func GetUsernamePasswordFromIpsSecret(dockerRegistryUrl string, data map[string][]byte) (string, string)
func SetIpsNameInValues(valuesContent []byte, ipsName string) ([]byte, error)
type DockerIpsCustomCredential
type DockerRegistryIpsConfigService
type DockerRegistryIpsConfigServiceImpl
- func NewDockerRegistryIpsConfigServiceImpl(logger *zap.SugaredLogger, ...) *DockerRegistryIpsConfigServiceImpl
- func (impl DockerRegistryIpsConfigServiceImpl) HandleImagePullSecretOnApplicationDeployment(environment *repository2.Environment, ciPipelineId int, ...) ([]byte, error)
- func (impl DockerRegistryIpsConfigServiceImpl) IsImagePullSecretAccessProvided(dockerRegistryId string, clusterId int) (bool, error)

Constants ¶

View Source

const ALL_CLUSTER_ID string = "-1"

View Source

const IMAGE_PULL_SECRET_KEY_IN_VALUES_YAML = "imagePullSecrets"

View Source

const IPS_CREDENTIAL_TYPE_CUSTOM_CREDENTIAL = "CUSTOM_CREDENTIAL"

View Source

const IPS_CREDENTIAL_TYPE_NAME = "NAME"

View Source

const IPS_CREDENTIAL_TYPE_SAME_AS_REGISTRY = "SAME_AS_REGISTRY"

Variables ¶

This section is empty.

Functions ¶

func BuildIpsData ¶

func BuildIpsData(dockerRegistryUrl, dockerRegistryUsername, dockerRegistryPassword, dockerRegistryEmail string) map[string][]byte

func BuildIpsName ¶

func BuildIpsName(dockerRegistryId string, ipsCredentialType string, ipsCredentialValue string) string

eg: quayio-dtron-ips

func CheckIfImagePullSecretAccessProvided ¶

func CheckIfImagePullSecretAccessProvided(appliedClusterIdsCsv string, ignoredClusterIdsCsv string, clusterId int) bool

func CreateCredentialForEcr ¶

func CreateCredentialForEcr(awsRegion, awsAccessKey, awsSecretKey string) (string, string, error)

returns username and password

func GetUsernamePasswordFromIpsSecret ¶

func GetUsernamePasswordFromIpsSecret(dockerRegistryUrl string, data map[string][]byte) (string, string)

func SetIpsNameInValues ¶

func SetIpsNameInValues(valuesContent []byte, ipsName string) ([]byte, error)

Types ¶

type DockerIpsCustomCredential ¶

type DockerIpsCustomCredential struct {
	Server   string `json:"server"`
	Username string `json:"username"`
	Password string `json:"password"`
	Email    string `json:"email"`
}

type DockerRegistryIpsConfigService ¶

type DockerRegistryIpsConfigService interface {
	IsImagePullSecretAccessProvided(dockerRegistryId string, clusterId int) (bool, error)
	HandleImagePullSecretOnApplicationDeployment(environment *repository2.Environment, ciPipelineId int, valuesFileContent []byte) ([]byte, error)
}

type DockerRegistryIpsConfigServiceImpl ¶

type DockerRegistryIpsConfigServiceImpl struct {
	// contains filtered or unexported fields
}

func NewDockerRegistryIpsConfigServiceImpl ¶

func NewDockerRegistryIpsConfigServiceImpl(logger *zap.SugaredLogger, dockerRegistryIpsConfigRepository repository.DockerRegistryIpsConfigRepository,
	k8sUtil *util.K8sUtil, clusterService cluster.ClusterService, ciPipelineRepository pipelineConfig.CiPipelineRepository,
	dockerArtifactStoreRepository repository.DockerArtifactStoreRepository) *DockerRegistryIpsConfigServiceImpl

func (DockerRegistryIpsConfigServiceImpl) HandleImagePullSecretOnApplicationDeployment ¶

func (impl DockerRegistryIpsConfigServiceImpl) HandleImagePullSecretOnApplicationDeployment(environment *repository2.Environment, ciPipelineId int, valuesFileContent []byte) ([]byte, error)

func (DockerRegistryIpsConfigServiceImpl) IsImagePullSecretAccessProvided ¶

func (impl DockerRegistryIpsConfigServiceImpl) IsImagePullSecretAccessProvided(dockerRegistryId string, clusterId int) (bool, error)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL