GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

validator

package

v1.154.1 Latest Latest Go to latest Published: Oct 30, 2026 License: Apache-2.0 Imports: 12 Imported by: 0

Details

This section is empty.

This section is empty.

func Register(plugins *admission.Plugins)

Register registers a plugin.

type ValidateBackupBucket struct {
	*admission.Handler
	// contains filtered or unexported fields
}

ValidateBackupBucket contains listers and admission handler.

func New() (*ValidateBackupBucket, error)

New creates a new ValidateBackupBucket admission plugin.

func (v *ValidateBackupBucket) AssignReadyFunc(f admission.ReadyFunc)

AssignReadyFunc assigns the ready function to the admission handler.

func (v *ValidateBackupBucket) SetSecurityInformerFactory(f gardensecurityinformers.SharedInformerFactory)

SetSecurityInformerFactory gets Lister from SharedInformerFactory.

func (v *ValidateBackupBucket) Validate(_ context.Context, a admission.Attributes, _ admission.ObjectInterfaces) error

Validate validates the BackupBucket details against existing Workload Identities

func (v *ValidateBackupBucket) ValidateInitialization() error

ValidateInitialization checks whether the plugin was correctly initialized.