Affected by GO-2025-3696 and 3 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

utils

package

v1.19.2 Latest Latest Go to latest Published: Mar 30, 2021 License: Apache-2.0, BSD-2-Clause, MIT, + 1 more Imports: 6 Imported by: 6

Details

This section is empty.

This section is empty.

func GetProject(namespace string, projectLister corelisters.ProjectLister) (*core.Project, error)

GetProject retrieves the project with the corresponding namespace

func IsSeedUsedByShoot(seedName string, shoots []*core.Shoot) bool

IsSeedUsedByShoot checks whether there is a shoot cluster refering the provided seed name

func SkipVerification(operation admission.Operation, metadata metav1.ObjectMeta) bool

SkipVerification is a common function to skip object verification during admission

This section is empty.