Affected by GO-2023-1583 and 3 other vulnerabilities

GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

GO-2025-4076: Constellation has insecure LUKS2 persistent storage partitions which may be opened and used in github.com/edgelesssys/constellation

gcpshared

package

v2.2.0 Latest Latest Go to latest Published: Nov 8, 2022 License: AGPL-3.0 Imports: 3 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/edgelesssys/constellation

Links

Open Source Insights

Documentation ¶

Index ¶

func JoinProviderID(project, zone, instanceName string) string
func SplitProviderID(providerID string) (project, zone, instance string, err error)
type ServiceAccountKey
- func ServiceAccountKeyFromURI(serviceAccountURI string) (ServiceAccountKey, error)
- func (k ServiceAccountKey) ToCloudServiceAccountURI() string

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func JoinProviderID ¶

func JoinProviderID(project, zone, instanceName string) string

JoinProviderID builds a k8s provider ID for GCP instances. A providerID is build after the schema 'gce://<project-id>/<zone>/<instance-name>'

func SplitProviderID ¶

func SplitProviderID(providerID string) (project, zone, instance string, err error)

SplitProviderID splits a provider's id into core components. A providerID is build after the schema 'gce://<project-id>/<zone>/<instance-name>'

Types ¶

type ServiceAccountKey ¶

type ServiceAccountKey struct {
	Type                    string `json:"type"`
	ProjectID               string `json:"project_id"`
	PrivateKeyID            string `json:"private_key_id"`
	PrivateKey              string `json:"private_key"`
	ClientEmail             string `json:"client_email"`
	ClientID                string `json:"client_id"`
	AuthURI                 string `json:"auth_uri"`
	TokenURI                string `json:"token_uri"`
	AuthProviderX509CertURL string `json:"auth_provider_x509_cert_url"`
	ClientX509CertURL       string `json:"client_x509_cert_url"`
}

ServiceAccountKey is a GCP service account key.

func ServiceAccountKeyFromURI ¶

func ServiceAccountKeyFromURI(serviceAccountURI string) (ServiceAccountKey, error)

func (ServiceAccountKey) ToCloudServiceAccountURI ¶

func (k ServiceAccountKey) ToCloudServiceAccountURI() string

ToCloudServiceAccountURI converts the ServiceAccountKey into a cloud service account URI.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL