Affected by GO-2025-3696 and 1 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

vali

package

v1.89.4 Latest Latest Go to latest Published: Apr 5, 2024 License: Apache-2.0, BSD-2-Clause, MIT, + 1 more Imports: 36 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/gardener/gardener

Links

Documentation ¶

Index ¶

Constants
func CentralLoggingConfiguration() (component.CentralLoggingConfig, error)
type Interface
- func New(client client.Client, namespace string, ...) Interface
type Values

Constants ¶

View Source

const (
	// ValiPort is the port exposed by the vali.
	ValiPort = 3100
	// ServiceName is the name of the logging service.
	ServiceName = "logging"

	// ManagedResourceNameRuntime is the name of the managed resource which deploys Vali statefulSet.
	ManagedResourceNameRuntime = "vali"

	// ValitailTokenSecretName is the name of a secret in the kube-system namespace in the target cluster containing
	// valitail's token for communication with the kube-apiserver.
	ValitailTokenSecretName = valitailName
)

Variables ¶

This section is empty.

Functions ¶

func CentralLoggingConfiguration ¶

func CentralLoggingConfiguration() (component.CentralLoggingConfig, error)

CentralLoggingConfiguration returns a fluent-bit parser and filter for the vali logs.

Types ¶

type Interface ¶ added in v1.75.0

type Interface interface {
	component.Deployer
	component.MonitoringComponent
}

Interface contains functions for a vali deployer.

func New ¶ added in v1.74.0

func New(
	client client.Client,
	namespace string,
	secretsManager secretsmanager.Interface,
	values Values,
) Interface

New creates a new instance of Vali deployer.

type Values ¶ added in v1.74.0

type Values struct {
	ValiImage          string
	CuratorImage       string
	TelegrafImage      string
	KubeRBACProxyImage string
	InitLargeDirImage  string

	ClusterType             component.ClusterType
	Replicas                int32
	PriorityClassName       string
	IngressHost             string
	ShootNodeLoggingEnabled bool
	HVPAEnabled             bool
	Storage                 *resource.Quantity
	MaintenanceTimeWindow   *hvpav1alpha1.MaintenanceTimeWindow
}

Values are the values for the Vali.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL