GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

namespace

package

v1.154.1 Latest Latest Go to latest Published: Oct 30, 2026 License: Apache-2.0 Imports: 11 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/gardener/gardener

Links

Open Source Insights

Documentation ¶

Constants ¶

View Source

const (
	// HandlerName is the name of this admission webhook handler.
	HandlerName = "namespace-deletion-validator"
	// WebhookPath is the HTTP handler path for this admission webhook handler.
	WebhookPath = "/webhooks/validate-core-v1-namespace"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Handler ¶

type Handler struct {
	Logger        logr.Logger
	RuntimeClient client.Client
}

Handler performs validation.

func (*Handler) AddToManager ¶

func (h *Handler) AddToManager(mgr manager.Manager) error

AddToManager adds Handler to the given manager.

func (*Handler) ValidateCreate ¶

func (h *Handler) ValidateCreate(_ context.Context, _ runtime.Object) (admission.Warnings, error)

ValidateCreate performs the validation.

func (*Handler) ValidateDelete ¶

func (h *Handler) ValidateDelete(ctx context.Context, obj runtime.Object) (admission.Warnings, error)

ValidateDelete performs the validation.

func (*Handler) ValidateUpdate ¶

func (h *Handler) ValidateUpdate(_ context.Context, _, _ runtime.Object) (admission.Warnings, error)

ValidateUpdate performs the validation.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL