GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

adminaccess

package

v1.154.1 Latest Latest Go to latest Published: Oct 30, 2026 License: Apache-2.0 Imports: 11 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/gardener/gardener

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
func New(client client.Client, namespace string) component.DeployWaiter

Constants ¶

View Source

const (
	// ManagedResourceName is the name of the ManagedResource containing the resource specifications.
	ManagedResourceName = "shoot-core-adminaccess"
	// ShootAccessSecretNameSuffix is the suffix name of the shoot access secret.
	ShootAccessSecretNameSuffix = "cluster-admin"
	// PathOnControlPlaneNodes is the path on control plane nodes to which the token of this shoot access secret should
	// be synced.
	PathOnControlPlaneNodes = "/etc/kubernetes/admin-token"
)

Variables ¶

View Source

var TimeoutWaitForManagedResource = 2 * time.Minute

TimeoutWaitForManagedResource is the timeout used while waiting for the ManagedResources to become healthy or deleted.

Functions ¶

func New ¶

func New(client client.Client, namespace string) component.DeployWaiter

New creates a new instance of the deployer for AdminAccess.

Types ¶

This section is empty.

Source Files ¶

View all Source files

access.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL