Affected by GO-2025-3696 and 1 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

shootsystem

package

v1.88.0 Latest Latest Go to latest Published: Feb 9, 2024 License: Apache-2.0, BSD-2-Clause, MIT, + 1 more Imports: 25 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/gardener/gardener

Links

Documentation ¶

Index ¶

Constants
Variables
type Interface
- func New(client client.Client, namespace string, values Values) Interface
type Values

Constants ¶

View Source

const ManagedResourceName = "shoot-core-system"

ManagedResourceName is the name of the ManagedResource containing the resource specifications.

Variables ¶

View Source

var TimeoutWaitForManagedResource = 2 * time.Minute

TimeoutWaitForManagedResource is the timeout used while waiting for the ManagedResources to become healthy or deleted.

Functions ¶

This section is empty.

Types ¶

type Interface ¶ added in v1.86.0

type Interface interface {
	component.DeployWaiter
	SetAPIResourceList([]*metav1.APIResourceList)
}

Interface is an interface for managing shoot system resources.

func New ¶

func New(
	client client.Client,
	namespace string,
	values Values,
) Interface

New creates a new instance of DeployWaiter for shoot system resources.

type Values ¶

type Values struct {
	// APIResourceList is the list of available API resources in the shoot cluster.
	APIResourceList []*metav1.APIResourceList
	// Extensions is the list of the extension types.
	Extensions []string
	// ExternalClusterDomain is the external domain of the cluster.
	ExternalClusterDomain *string
	// IsWorkerless specifies whether the cluster has worker nodes.
	IsWorkerless bool
	// KubernetesVersion is the version of the cluster.
	KubernetesVersion *semver.Version
	// EncryptedResources is the list of resources which are encrypted by the kube-apiserver.
	EncryptedResources []string
	// Object is the shoot object.
	Object *gardencorev1beta1.Shoot
	// PodNetworkCIDR is the CIDR of the pod network.
	PodNetworkCIDR string
	// ProjectName is the name of the project of the cluster.
	ProjectName string
	// ServiceNetworkCIDR is the CIDR of the service network.
	ServiceNetworkCIDR string
}

Values is a set of configuration values for the system resources.

Source Files ¶

View all Source files

shootsystem.go

Directories ¶

Path	Synopsis
mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL