Affected by GO-2025-3696 and 3 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

resources

package

v1.81.2 Latest Latest Go to latest Published: Oct 18, 2023 License: Apache-2.0, BSD-2-Clause, MIT, + 1 more Imports: 11 Imported by: 2

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/gardener/gardener

Links

Open Source Insights

Documentation ¶

Index ¶

func NewFactory(_ io.Reader) (admission.Interface, error)
func Register(plugins *admission.Plugins)
type Resources
- func New() (*Resources, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

Types ¶

type Resources ¶

type Resources struct {
	*admission.Handler
	// contains filtered or unexported fields
}

Resources contains an admission handler and listers.

func New ¶

func New() (*Resources, error)

New creates a new Resources admission plugin.

func (*Resources) AssignReadyFunc ¶

func (r *Resources) AssignReadyFunc(f admission.ReadyFunc)

AssignReadyFunc assigns the ready function to the admission handler.

func (*Resources) SetInternalCoreClientset ¶

func (r *Resources) SetInternalCoreClientset(c gardencoreclientset.Interface)

SetInternalCoreClientset gets the clientset from the Kubernetes client.

func (*Resources) Validate ¶

func (r *Resources) Validate(ctx context.Context, a admission.Attributes, _ admission.ObjectInterfaces) error

Validate makes admissions decisions based on the resources specified in a ControllerRegistration object. It does reject the request if there is any other existing ControllerRegistration object in the system that specifies the same resource kind/type combination like the incoming object.

func (*Resources) ValidateInitialization ¶

func (r *Resources) ValidateInitialization() error

ValidateInitialization checks whether the plugin was correctly initialized.

Source Files ¶

View all Source files

admission.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL