Affected by GO-2025-3696 and 3 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

utils

package

v0.33.5 Latest Latest Go to latest Published: Dec 19, 2019 License: Apache-2.0, BSD-2-Clause, MIT, + 1 more Imports: 8 Imported by: 6

Details

This section is empty.

This section is empty.

func GetProject(namespace string, projectLister gardenlisters.ProjectLister) (*garden.Project, error)

GetProject retrieves the project with the corresponding namespace

func SkipVerification(operation admission.Operation, metadata metav1.ObjectMeta) bool

SkipVerification is a common function to skip object verification during admission

func ValidateNetworkDisjointedness(seedNetworks garden.SeedNetworks, k8sNetworks garden.K8SNetworks, fldPath *field.Path) field.ErrorList

ValidateNetworkDisjointedness validates that the given <seedNetworks> and <k8sNetworks> are disjoint.

This section is empty.