Affected by GO-2023-1583 and 3 other vulnerabilities

GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

GO-2025-4076: Constellation has insecure LUKS2 persistent storage partitions which may be opened and used in github.com/edgelesssys/constellation

gcp

package

v2.3.0 Latest Latest Go to latest Published: Dec 12, 2022 License: AGPL-3.0 Imports: 19 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/edgelesssys/constellation

Links

Open Source Insights

Documentation ¶

Index ¶

type Cloud
- func New(ctx context.Context) (cloud *Cloud, err error)
type Logger
- func NewLogger(ctx context.Context, logName string) (*Logger, error)
- func (l *Logger) Close() error
- func (l *Logger) Disclose(msg string)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Cloud ¶ added in v2.3.0

type Cloud struct {
	// contains filtered or unexported fields
}

Cloud provides GCP cloud metadata information and API access.

func New ¶

func New(ctx context.Context) (cloud *Cloud, err error)

New creates and initializes Cloud. The Close method should be called when Cloud is no longer needed.

func (*Cloud) Close ¶ added in v2.3.0

func (c *Cloud) Close()

Close closes all connections to the GCP API server.

func (*Cloud) GetLoadBalancerEndpoint ¶ added in v2.3.0

func (c *Cloud) GetLoadBalancerEndpoint(ctx context.Context) (string, error)

GetLoadBalancerEndpoint returns the endpoint of the load balancer.

func (*Cloud) InitSecretHash ¶ added in v2.3.0

func (c *Cloud) InitSecretHash(ctx context.Context) ([]byte, error)

InitSecretHash retrieves the InitSecretHash of the current instance.

func (*Cloud) List ¶ added in v2.3.0

func (c *Cloud) List(ctx context.Context) ([]metadata.InstanceMetadata, error)

List retrieves all instances belonging to the current constellation.

func (*Cloud) ProviderID ¶ added in v2.3.0

func (c *Cloud) ProviderID(ctx context.Context) (string, error)

ProviderID returns the providerID of the current instance.

func (*Cloud) Self ¶ added in v2.3.0

func (c *Cloud) Self(ctx context.Context) (metadata.InstanceMetadata, error)

Self retrieves the current instance.

func (*Cloud) UID ¶ added in v2.3.0

func (c *Cloud) UID(ctx context.Context) (string, error)

UID retrieves the UID of the constellation.

type Logger ¶

type Logger struct {
	// contains filtered or unexported fields
}

Logger logs to GCP cloud logging. Do not use to log sensitive information.

func NewLogger ¶

func NewLogger(ctx context.Context, logName string) (*Logger, error)

NewLogger creates a new Cloud Logger for GCP. https://cloud.google.com/logging/docs/setup/go

func (*Logger) Close ¶

func (l *Logger) Close() error

Close waits for all buffer to be written.

func (*Logger) Disclose ¶

func (l *Logger) Disclose(msg string)

Disclose stores log information in GCP Cloud Logging! Do **NOT** log sensitive information!

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL