GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

deletionconfirmation

package

v1.153.2 Latest Latest Go to latest Published: Oct 22, 2026 License: Apache-2.0 Imports: 27 Imported by: 2

Details

This section is empty.

This section is empty.

func NewFactory(_ io.Reader) (admission.Interface, error)

NewFactory creates a new PluginFactory.

func Register(plugins *admission.Plugins)

Register registers a plugin.

type DeletionConfirmation struct {
	*admission.Handler
	// contains filtered or unexported fields
}

DeletionConfirmation contains an admission handler and listers.

func New() (*DeletionConfirmation, error)

New creates a new DeletionConfirmation admission plugin.

func (d *DeletionConfirmation) Admit(_ context.Context, a admission.Attributes, _ admission.ObjectInterfaces) error

Admit maintains the deletion.gardener.cloud/confirmed-by annotation.

func (d *DeletionConfirmation) AssignReadyFunc(f admission.ReadyFunc)

AssignReadyFunc assigns the ready function to the admission handler.

func (d *DeletionConfirmation) SetCoreClientSet(c versioned.Interface)

SetCoreClientSet gets the clientset from the Kubernetes client.

func (d *DeletionConfirmation) SetCoreInformerFactory(f gardencoreinformers.SharedInformerFactory)

SetCoreInformerFactory gets Lister from SharedInformerFactory.

func (d *DeletionConfirmation) Validate(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) error

Validate makes admissions decisions based on deletion confirmation annotation.

func (d *DeletionConfirmation) ValidateInitialization() error

ValidateInitialization checks whether the plugin was correctly initialized.