Affected by GO-2025-3696 and 3 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

shootstate

package

v1.2.0 Latest Latest Go to latest Published: Apr 2, 2020 License: Apache-2.0, BSD-2-Clause, MIT, + 1 more Imports: 13 Imported by: 0

Details

View Source

const (
	// PluginName is the name of this admission plugin.
	PluginName = "ShootStateDeletionValidator"
)

This section is empty.

func NewFactory(config io.Reader) (admission.Interface, error)

NewFactory creates a new PluginFactory.

func Register(plugins *admission.Plugins)

Register registers a plugin.

type ValidateShootStateDeletion struct {
	*admission.Handler
	// contains filtered or unexported fields
}

ValidateShootStateDeletion contains listers and admission handler.

func New() (*ValidateShootStateDeletion, error)

New creates a new ShootStateDeletion admission plugin.

func (d *ValidateShootStateDeletion) AssignReadyFunc(f admission.ReadyFunc)

AssignReadyFunc assigns the ready function to the admission handler.

func (d *ValidateShootStateDeletion) SetExternalCoreInformerFactory(f externalcoreinformers.SharedInformerFactory)

SetExternalCoreInformerFactory sets the external garden core informer factory.

func (d *ValidateShootStateDeletion) SetInternalCoreClientset(c coreclientset.Interface)

SetInternalCoreClientset sets the garden core clientset.

func (d *ValidateShootStateDeletion) Validate(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) error

Validate makes admissions decisions based on deletion confirmation annotation.

func (d *ValidateShootStateDeletion) ValidateInitialization() error

ValidateInitialization checks whether the plugin was correctly initialized.