Affected by GO-2025-3696 and 1 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

projectrbac

package

v1.79.2 Latest Latest Go to latest Published: Sep 27, 2023 License: Apache-2.0, BSD-2-Clause, MIT, + 1 more Imports: 16 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type Interface interface {
	component.Deployer
	DeleteStaleExtensionRolesResources(context.Context) error
}

Interface extends component.Deployer with a function to delete stale extension roles resources.

func New(client client.Client, project *gardencorev1beta1.Project) (Interface, error)

New creates a new instance of Interface for the RBAC resources required to interact with Projects.