GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

containerruntime

package

v1.154.1 Latest Latest Go to latest Published: Oct 30, 2026 License: Apache-2.0 Imports: 14 Imported by: 2

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/gardener/gardener

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
type Interface
- func New(log logr.Logger, client client.Client, values *Values, ...) Interface
type Values

Constants ¶

View Source

const (
	// DefaultInterval is the default interval for retry operations.
	DefaultInterval = 5 * time.Second
	// DefaultSevereThreshold is the default threshold until an error reported by another component is treated as 'severe'.
	DefaultSevereThreshold = 30 * time.Second
	// DefaultTimeout is the default timeout and defines how long Gardener should wait
	// for a successful reconciliation of a containerruntime resource.
	DefaultTimeout = 3 * time.Minute
)

Variables ¶

View Source

var TimeNow = time.Now

TimeNow returns the current time. Exposed for testing.

Functions ¶

This section is empty.

Types ¶

type Interface ¶

type Interface interface {
	component.DeployMigrateWaiter
	// DeleteStaleResources deletes unused container runtime resources from the shoot namespace in the seed.
	DeleteStaleResources(ctx context.Context) error
	// WaitCleanupStaleResources waits until all unused ContainerRuntime resources are cleaned up.
	WaitCleanupStaleResources(ctx context.Context) error
}

Interface is an interface for managing ContainerRuntimes.

func New ¶

func New(
	log logr.Logger,
	client client.Client,
	values *Values,
	waitInterval time.Duration,
	waitSevereThreshold time.Duration,
	waitTimeout time.Duration,
) Interface

New creates a new instance of Interface.

type Values ¶

type Values struct {
	// Namespace is the namespace for the ContainerRuntime resource.
	Namespace string
	// Workers is the list of worker pools.
	Workers []gardencorev1beta1.Worker
}

Values contains the values used to create a ContainerRuntime resources.

Source Files ¶

View all Source files

containerruntime.go

Directories ¶

Path	Synopsis
mock Package containerruntime is a generated GoMock package.	Package containerruntime is a generated GoMock package.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL