GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

highavailabilityconfig

package

v1.151.3 Latest Latest Go to latest Published: Oct 8, 2026 License: Apache-2.0 Imports: 25 Imported by: 2

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/gardener/gardener

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
type Handler
- func (h *Handler) AddToManager(mgr manager.Manager) error
- func (h *Handler) Handle(ctx context.Context, req admission.Request) admission.Response

Constants ¶

View Source

const (
	// HandlerName is the name of the webhook handler.
	HandlerName = "high-availability-config"
	// WebhookPath is the path at which the handler should be registered.
	WebhookPath = "/webhooks/high-availability-config"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Handler ¶

type Handler struct {
	Logger       logr.Logger
	TargetClient client.Reader
	Config       resourcemanagerconfigv1alpha1.HighAvailabilityConfigWebhookConfig
	Decoder      admission.Decoder
}

Handler handles admission requests and sets the following fields based on the failure tolerance type and the component type: - `.spec.replicas` - `.spec.template.spec.affinity` - `.spec.template.spec.topologySpreadConstraints`

func (*Handler) AddToManager ¶

func (h *Handler) AddToManager(mgr manager.Manager) error

AddToManager adds Handler to the given manager.

func (*Handler) Handle ¶

func (h *Handler) Handle(ctx context.Context, req admission.Request) admission.Response

Handle defaults the high availability settings of the provided resource.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL