Affected by GO-2025-3696 and 3 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

quotavalidator

package

v1.76.2 Latest Latest Go to latest Published: Aug 8, 2023 License: Apache-2.0, BSD-2-Clause, MIT, + 1 more Imports: 20 Imported by: 3

Details

This section is empty.

This section is empty.

func Register(plugins *admission.Plugins)

Register registers a plugin.

type QuotaValidator struct {
	*admission.Handler
	// contains filtered or unexported fields
}

QuotaValidator contains listers and admission handler.

func New(time timeutils.Ops) (*QuotaValidator, error)

New creates a new QuotaValidator admission plugin.

func (q *QuotaValidator) AssignReadyFunc(f admission.ReadyFunc)

AssignReadyFunc assigns the ready function to the admission handler.

func (q *QuotaValidator) SetInternalCoreInformerFactory(f gardencoreinformers.SharedInformerFactory)

SetInternalCoreInformerFactory gets Lister from SharedInformerFactory.

func (q *QuotaValidator) Validate(_ context.Context, a admission.Attributes, _ admission.ObjectInterfaces) error

Validate checks that the requested Shoot resources do not exceed the quota limits.

func (q *QuotaValidator) ValidateInitialization() error

ValidateInitialization checks whether the plugin was correctly initialized.