Affected by GO-2025-3696 and 3 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

controllerdeployment

package

v1.38.0 Latest Latest Go to latest Published: Dec 17, 2021 License: Apache-2.0, BSD-2-Clause, MIT, + 1 more Imports: 16 Imported by: 0

Details

View Source

const FinalizerName = "core.gardener.cloud/controllerdeployment"

FinalizerName is the finalizer used by this controller.

This section is empty.

func NewReconciler(l logrus.FieldLogger, gardenClient client.Client) reconcile.Reconciler

NewReconciler creates a new instance of a reconciler which reconciles ControllerDeployments.

type Controller struct {
	// contains filtered or unexported fields
}

Controller controls ManagedSeedSets.

func New(
	ctx context.Context,
	clientMap clientmap.ClientMap,
	logger *logrus.Logger,
) (*Controller, error)

New creates a new Gardener controller for ControllerDeployments.

func (c *Controller) Run(ctx context.Context, workers int)

Run runs the Controller until the given context is cancelled.