GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

network

package

v1.154.1 Latest Latest Go to latest Published: Oct 30, 2026 License: Apache-2.0 Imports: 13 Imported by: 2

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/gardener/gardener

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
type Interface
- func New(log logr.Logger, client client.Client, values *Values, ...) Interface
type Values

Constants ¶

View Source

const (
	// DefaultInterval is the default interval for retry operations.
	DefaultInterval = 5 * time.Second
	// DefaultSevereThreshold is the default threshold until an error reported by another component is treated as 'severe'.
	DefaultSevereThreshold = 30 * time.Second
	// DefaultTimeout is the default timeout and defines how long Gardener should wait
	// for a successful reconciliation of a network resource.
	DefaultTimeout = 3 * time.Minute
)

Variables ¶

View Source

var TimeNow = time.Now

TimeNow returns the current time. Exposed for testing.

Functions ¶

This section is empty.

Types ¶

type Interface ¶ added in v1.99.0

type Interface interface {
	component.DeployMigrateWaiter
	SetPodCIDRs([]net.IPNet)
	SetServiceCIDRs([]net.IPNet)
	Get(ctx context.Context) (*extensionsv1alpha1.Network, error)
}

Interface is an interface for managing the network CRD deployment.

func New ¶

func New(
	log logr.Logger,
	client client.Client,
	values *Values,
	waitInterval time.Duration,
	waitSevereThreshold time.Duration,
	waitTimeout time.Duration,
) Interface

New creates a new instance of DeployWaiter for a Network.

type Values ¶

type Values struct {
	// Namespace is the namespace of the Shoot network in the Seed
	Namespace string
	// Name is the name of the Network extension. Commonly the Shoot's name.
	Name string
	// Type is the type of Network plugin/extension (e.g calico)
	Type string
	// IPFamilies specifies the IP protocol versions to use for shoot networking.
	IPFamilies []extensionsv1alpha1.IPFamily
	// ProviderConfig contains the provider config for the Network extension.
	ProviderConfig *runtime.RawExtension
	// PodCIDRs are the Shoot's pod CIDRs in the Shoot VPC
	PodCIDRs []net.IPNet
	// ServiceCIDRs are the Shoot's service CIDRs in the Shoot VPC
	ServiceCIDRs []net.IPNet
}

Values contains the values used to create a Network CRD

Source Files ¶

View all Source files

network.go

Directories ¶

Path	Synopsis
mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL