GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

auditpolicy

package

v1.154.1 Latest Latest Go to latest Published: Oct 30, 2026 License: Apache-2.0 Imports: 6 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/gardener/gardener

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func AddToManager(mgr manager.Manager, gardenNamespace string) error
func NewHandler(apiReader, c client.Reader, decoderAdmission admission.Decoder, ...) admission.Handler

Constants ¶

View Source

const (
	// HandlerName is the name of this admission webhook handler.
	HandlerName = "auditpolicy_validator"
	// WebhookPath is the HTTP handler path for this admission webhook handler.
	WebhookPath = "/webhooks/audit-policies"
)

Variables ¶

This section is empty.

Functions ¶

func AddToManager ¶

func AddToManager(mgr manager.Manager, gardenNamespace string) error

AddToManager adds the webhook to the given manager.

func NewHandler ¶

func NewHandler(apiReader, c client.Reader, decoderAdmission admission.Decoder, gardenNamespace string) admission.Handler

NewHandler returns a handler that validates audit policy for Garden and referenced ConfigMaps

Types ¶

This section is empty.

Source Files ¶

View all Source files

add.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL