Affected by GO-2025-3696 and 3 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

builder

package

v1.44.2 Latest Latest Go to latest Published: Apr 8, 2022 License: Apache-2.0, BSD-2-Clause, MIT, + 1 more Imports: 6 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/gardener/gardener

Links

Open Source Insights

Documentation ¶

Index ¶

type ManagedResource
- func NewManagedResource(client client.Client) *ManagedResource
type Secret
- func NewSecret(client client.Client) *Secret
type Secrets
- func NewSecrets(client client.Client) *Secrets

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type ManagedResource ¶

type ManagedResource struct {
	// contains filtered or unexported fields
}

ManagedResource is a structure managing a ManagedResource.

func NewManagedResource ¶

func NewManagedResource(client client.Client) *ManagedResource

NewManagedResource creates a new builder for a ManagedResource.

func (*ManagedResource) Delete ¶

func (m *ManagedResource) Delete(ctx context.Context) error

Delete deletes the ManagedResource.

func (*ManagedResource) DeletePersistentVolumeClaims ¶

func (m *ManagedResource) DeletePersistentVolumeClaims(v bool) *ManagedResource

DeletePersistentVolumeClaims sets the DeletePersistentVolumeClaims field.

func (*ManagedResource) ForceOverwriteAnnotations ¶

func (m *ManagedResource) ForceOverwriteAnnotations(v bool) *ManagedResource

ForceOverwriteAnnotations sets the ForceOverwriteAnnotations field.

func (*ManagedResource) ForceOverwriteLabels ¶

func (m *ManagedResource) ForceOverwriteLabels(v bool) *ManagedResource

ForceOverwriteLabels sets the ForceOverwriteLabels field.

func (*ManagedResource) KeepObjects ¶

func (m *ManagedResource) KeepObjects(v bool) *ManagedResource

KeepObjects sets the KeepObjects field.

func (*ManagedResource) Reconcile ¶

func (m *ManagedResource) Reconcile(ctx context.Context) error

Reconcile creates or updates the ManagedResource.

func (*ManagedResource) WithAnnotations ¶

func (m *ManagedResource) WithAnnotations(annotations map[string]string) *ManagedResource

WithAnnotations sets the annotations.

func (*ManagedResource) WithClass ¶

func (m *ManagedResource) WithClass(name string) *ManagedResource

WithClass sets the Class field.

func (*ManagedResource) WithInjectedLabels ¶

func (m *ManagedResource) WithInjectedLabels(labelsToInject map[string]string) *ManagedResource

WithInjectedLabels sets the InjectLabels field.

func (*ManagedResource) WithLabels ¶

func (m *ManagedResource) WithLabels(labels map[string]string) *ManagedResource

WithLabels sets the labels.

func (*ManagedResource) WithNamespacedName ¶

func (m *ManagedResource) WithNamespacedName(namespace, name string) *ManagedResource

WithNamespacedName sets the namespace and name.

func (*ManagedResource) WithSecretRef ¶

func (m *ManagedResource) WithSecretRef(secretRefName string) *ManagedResource

WithSecretRef adds a reference with the given name to the SecretRefs field.

func (*ManagedResource) WithSecretRefs ¶

func (m *ManagedResource) WithSecretRefs(secretRefs []corev1.LocalObjectReference) *ManagedResource

WithSecretRefs sets the SecretRefs field.

type Secret ¶

type Secret struct {
	// contains filtered or unexported fields
}

Secret is a structure for managing a secret.

func NewSecret ¶

func NewSecret(client client.Client) *Secret

NewSecret creates a new builder for a secret.

func (*Secret) Delete ¶

func (s *Secret) Delete(ctx context.Context) error

Delete deletes the secret.

func (*Secret) Reconcile ¶

func (s *Secret) Reconcile(ctx context.Context) error

Reconcile creates or updates the secret.

func (*Secret) WithAnnotations ¶

func (s *Secret) WithAnnotations(annotations map[string]string) *Secret

WithAnnotations sets the annotations.

func (*Secret) WithKeyValues ¶

func (s *Secret) WithKeyValues(keyValues map[string][]byte) *Secret

WithKeyValues sets the data map.

func (*Secret) WithLabels ¶

func (s *Secret) WithLabels(labels map[string]string) *Secret

WithLabels sets the labels.

func (*Secret) WithNamespacedName ¶

func (s *Secret) WithNamespacedName(namespace, name string) *Secret

WithNamespacedName sets the namespace and name.

type Secrets ¶

type Secrets struct {
	// contains filtered or unexported fields
}

Secrets is a structure for managing multiple secrets.

func NewSecrets ¶

func NewSecrets(client client.Client) *Secrets

NewSecrets creates a Manager for multiple secrets.

func (*Secrets) Delete ¶

func (s *Secrets) Delete(ctx context.Context) error

Delete deletes all secrets.

func (*Secrets) Reconcile ¶

func (s *Secrets) Reconcile(ctx context.Context) error

Reconcile reconciles all secrets.

func (*Secrets) WithSecret ¶

func (s *Secrets) WithSecret(secrets Secret) *Secrets

WithSecret adds the given secret to the secrets list.

func (*Secrets) WithSecretList ¶

func (s *Secrets) WithSecretList(secrets []Secret) *Secrets

WithSecretList sets the secrets list.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL