Affected by GO-2023-1583 and 3 other vulnerabilities

GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

GO-2025-4076: Constellation has insecure LUKS2 persistent storage partitions which may be opened and used in github.com/edgelesssys/constellation

cloudcmd

package

v2.1.0 Latest Latest Go to latest Published: Oct 7, 2022 License: AGPL-3.0 Imports: 36 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/edgelesssys/constellation

Links

Open Source Insights

Documentation ¶

Index ¶

type Creator
- func NewCreator(out io.Writer) *Creator
- func (c *Creator) Create(ctx context.Context, provider cloudprovider.Provider, config *config.Config, ...) (state.ConstellationState, error)
type Terminator
- func NewTerminator() *Terminator
- func (t *Terminator) Terminate(ctx context.Context, state state.ConstellationState) error
type Upgrader
- func NewUpgrader(writer io.Writer) (*Upgrader, error)
- func (u *Upgrader) GetCurrentImage(ctx context.Context) (*unstructured.Unstructured, string, error)
- func (u *Upgrader) Upgrade(ctx context.Context, image string, measurements map[uint32][]byte) error
type Validator
- func NewValidator(provider cloudprovider.Provider, config *config.Config) (*Validator, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Creator ¶

type Creator struct {
	// contains filtered or unexported fields
}

Creator creates cloud resources.

func NewCreator ¶

func NewCreator(out io.Writer) *Creator

NewCreator creates a new creator.

func (*Creator) Create ¶

func (c *Creator) Create(ctx context.Context, provider cloudprovider.Provider, config *config.Config, name, insType string, controlPlaneCount, workerCount int,
) (state.ConstellationState, error)

Create creates the handed amount of instances and all the needed resources.

type Terminator ¶

type Terminator struct {
	// contains filtered or unexported fields
}

Terminator deletes cloud provider resources.

func NewTerminator ¶

func NewTerminator() *Terminator

NewTerminator create a new cloud terminator.

func (*Terminator) Terminate ¶

func (t *Terminator) Terminate(ctx context.Context, state state.ConstellationState) error

Terminate deletes the could provider resources defined in the constellation state.

type Upgrader ¶

type Upgrader struct {
	// contains filtered or unexported fields
}

Upgrader handles upgrading the cluster's components using the CLI.

func NewUpgrader ¶

func NewUpgrader(writer io.Writer) (*Upgrader, error)

NewUpgrader returns a new Upgrader.

func (*Upgrader) GetCurrentImage ¶

func (u *Upgrader) GetCurrentImage(ctx context.Context) (*unstructured.Unstructured, string, error)

GetCurrentImage returns the currently used image of the cluster.

func (*Upgrader) Upgrade ¶

func (u *Upgrader) Upgrade(ctx context.Context, image string, measurements map[uint32][]byte) error

Upgrade upgrades the cluster to the given measurements and image.

type Validator ¶

type Validator struct {
	// contains filtered or unexported fields
}

func NewValidator ¶

func NewValidator(provider cloudprovider.Provider, config *config.Config) (*Validator, error)

func (*Validator) PCRS ¶

func (v *Validator) PCRS() map[uint32][]byte

PCRS returns the validator's PCR map.

func (*Validator) UpdateInitPCRs ¶

func (v *Validator) UpdateInitPCRs(ownerID, clusterID string) error

func (*Validator) V ¶

func (v *Validator) V(cmd *cobra.Command) atls.Validator

V returns the validator as atls.Validator.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL