Affected by GO-2025-3696 and 3 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

resourcereservation

package

v1.100.2 Latest Latest Go to latest Published: Sep 6, 2024 License: Apache-2.0 Imports: 19 Imported by: 1

Details

This section is empty.

This section is empty.

func LoadConfiguration(config io.Reader) (*shootresourcereservation.Configuration, error)

LoadConfiguration loads the provided configuration.

func New(useGKEFormula bool) admission.MutationInterface

New creates a new ResourceReservation admission plugin.

func Register(plugins *admission.Plugins)

Register registers a plugin.

type ResourceReservation struct {
	*admission.Handler
	// contains filtered or unexported fields
}

ResourceReservation contains required information to process admission requests.

func (c *ResourceReservation) Admit(_ context.Context, a admission.Attributes, _ admission.ObjectInterfaces) error

Admit injects default resource reservations into worker pools of shoot objects

func (c *ResourceReservation) AssignReadyFunc(f admission.ReadyFunc)

AssignReadyFunc assigns the ready function to the admission handler.

func (c *ResourceReservation) SetCoreInformerFactory(f gardencoreinformers.SharedInformerFactory)

SetCoreInformerFactory gets Lister from SharedInformerFactory.

func (c *ResourceReservation) ValidateInitialization() error

ValidateInitialization checks whether the plugin was correctly initialized.

Path	Synopsis
apis
shootresourcereservation
shootresourcereservation/install
shootresourcereservation/v1alpha1