GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

connection

package

v1.8.2 Latest Latest Go to latest Published: Oct 1, 2025 License: Apache-2.0 Imports: 37 Imported by: 7

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/devtron-labs/devtron

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func EncodeX509KeyPair(cert tls.Certificate) ([]byte, []byte)
func GetTLS(cert *tls.Certificate) credentials.TransportCredentials
func SetTokenAuth(token string)
func SettingsManager(cfg *bean.Config) (*settings.SettingsManager, error)
type ArgoCDConnectionManager
type ArgoCDConnectionManagerImpl
- func NewArgoCDConnectionManagerImpl(Logger *zap.SugaredLogger, settingsManager *settings.SettingsManager, ...) (*ArgoCDConnectionManagerImpl, error)
type TokenAuth
- func GetTokenAuth() *TokenAuth
- func (t TokenAuth) GetRequestMetadata(ctx context.Context, in ...string) (map[string]string, error)
- func (TokenAuth) RequireTransportSecurity() bool

Constants ¶

View Source

const (
	DEVTRON_USER                     = "devtron"
	DEVTRONCD_NAMESPACE              = "devtroncd"
	ARGOCD_CM                        = "argocd-cm"
	ARGOCD_SECRET                    = "argocd-secret"
	ARGO_USER_APIKEY_CAPABILITY      = "apiKey"
	ARGO_USER_LOGIN_CAPABILITY       = "login"
	DEVTRON_ARGOCD_USERNAME_KEY      = "DEVTRON_ACD_USER_NAME"
	DEVTRON_ARGOCD_USER_PASSWORD_KEY = "DEVTRON_ACD_USER_PASSWORD"
	DEVTRON_ARGOCD_TOKEN_KEY         = "DEVTRON_ACD_TOKEN"
)

Variables ¶

This section is empty.

Functions ¶

func EncodeX509KeyPair ¶

func EncodeX509KeyPair(cert tls.Certificate) ([]byte, []byte)

EncodeX509KeyPair encodes a TLS Certificate into its pem encoded format for storage

func GetTLS ¶

func GetTLS(cert *tls.Certificate) credentials.TransportCredentials

func SetTokenAuth ¶

func SetTokenAuth(token string)

func SettingsManager ¶

func SettingsManager(cfg *bean.Config) (*settings.SettingsManager, error)

Types ¶

type ArgoCDConnectionManager ¶

type ArgoCDConnectionManager interface {
	GetGrpcClientConnection(grpcConfig *bean.ArgoGRPCConfig) *grpc.ClientConn
	GetOrUpdateArgoCdUserDetail(grpcConfig *bean.ArgoGRPCConfig) string
}

type ArgoCDConnectionManagerImpl ¶

type ArgoCDConnectionManagerImpl struct {
	// contains filtered or unexported fields
}

func NewArgoCDConnectionManagerImpl ¶

func NewArgoCDConnectionManagerImpl(Logger *zap.SugaredLogger,
	settingsManager *settings.SettingsManager,
	moduleRepository moduleRepo.ModuleRepository,
	environmentVariables *util2.EnvironmentVariables,
	k8sUtil *k8s.K8sServiceImpl,
	k8sCommonService k8s2.K8sCommonService,
	versionService version.VersionService,
	gitOpsConfigReadService config.GitOpsConfigReadService,
	runTimeConfig *k8s.RuntimeConfig,
	argoCDConfigGetter config2.ArgoCDConfigGetter,
	asyncRunnable *async.Runnable) (*ArgoCDConnectionManagerImpl, error)

func (*ArgoCDConnectionManagerImpl) GetGrpcClientConnection ¶ added in v1.2.2

func (impl *ArgoCDConnectionManagerImpl) GetGrpcClientConnection(grpcConfig *bean.ArgoGRPCConfig) *grpc.ClientConn

GetConnection - this function will call only for acd connection

func (*ArgoCDConnectionManagerImpl) GetOrUpdateArgoCdUserDetail ¶ added in v1.2.1

func (impl *ArgoCDConnectionManagerImpl) GetOrUpdateArgoCdUserDetail(grpcConfig *bean.ArgoGRPCConfig) string

func (*ArgoCDConnectionManagerImpl) ValidateGitOpsAndGetOrUpdateArgoCdUserDetail ¶ added in v1.2.1

func (impl *ArgoCDConnectionManagerImpl) ValidateGitOpsAndGetOrUpdateArgoCdUserDetail(grpcConfig *bean.ArgoGRPCConfig) string

type TokenAuth ¶

type TokenAuth struct {
	// contains filtered or unexported fields
}

func GetTokenAuth ¶

func GetTokenAuth() *TokenAuth

func (TokenAuth) GetRequestMetadata ¶

func (t TokenAuth) GetRequestMetadata(ctx context.Context, in ...string) (map[string]string, error)

Return value is mapped to request headers.

func (TokenAuth) RequireTransportSecurity ¶

func (TokenAuth) RequireTransportSecurity() bool

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL