Affected by GO-2025-3696 and 3 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

validator

package

v1.111.4 Latest Latest Go to latest Published: Mar 7, 2025 License: Apache-2.0 Imports: 34 Imported by: 1

Details

This section is empty.

This section is empty.

func Register(plugins *admission.Plugins)

Register registers a plugin.

type ManagedSeed struct {
	*admission.Handler
	// contains filtered or unexported fields
}

ManagedSeed contains listers and admission handler.

func New() (*ManagedSeed, error)

New creates a new ManagedSeed admission plugin.

func (v *ManagedSeed) Admit(ctx context.Context, a admission.Attributes, _ admission.ObjectInterfaces) error

Admit validates and if appropriate mutates the given managed seed against the shoot that it references.

func (v *ManagedSeed) AssignReadyFunc(f admission.ReadyFunc)

AssignReadyFunc assigns the ready function to the admission handler.

func (v *ManagedSeed) SetCoreClientSet(c gardencoreclientset.Interface)

SetCoreClientSet sets the garden core clientset.

func (v *ManagedSeed) SetCoreInformerFactory(f gardencoreinformers.SharedInformerFactory)

SetCoreInformerFactory gets Lister from SharedInformerFactory.

func (v *ManagedSeed) SetKubeInformerFactory(f kubeinformers.SharedInformerFactory)

SetKubeInformerFactory gets Lister from SharedInformerFactory.

func (v *ManagedSeed) SetSecurityInformerFactory(f securityinformers.SharedInformerFactory)

SetSecurityInformerFactory gets Lister from SharedInformerFactory.

func (v *ManagedSeed) SetSeedManagementClientSet(c seedmanagementclientset.Interface)

SetSeedManagementClientSet sets the garden seedmanagement clientset.

func (v *ManagedSeed) ValidateInitialization() error

ValidateInitialization checks whether the plugin was correctly initialized.