Affected by GO-2025-3917 and 2 other vulnerabilities

GO-2025-3917: NeuVector has an insecure password storage vulnerable to rainbow attack in github.com/neuvector/neuvector

GO-2025-3918: NeuVector admin account has insecure default password in github.com/neuvector/neuvector

GO-2025-3919: NeuVector process with sensitive arguments lead to leakage in github.com/neuvector/neuvector

k8sutils

package

v0.0.0-test Latest Latest Go to latest Published: Dec 11, 2024 License: Apache-2.0 Imports: 5 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/neuvector/neuvector

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
func CanI(clientset *kubernetes.Clientset, ra authorizationv1.ResourceAttributes, ...) (bool, error)

Constants ¶

View Source

const ALL_NAMESPACE = "{all_namespace}"

View Source

const NV_NAMESPACE = "{nv_namespace}"

Variables ¶

View Source

var SecretInformerRequiredPermissions = []authorizationv1.ResourceAttributes{
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "get",
		Group:       "",
		Version:     "v1",
		Resource:    "secrets",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "list",
		Group:       "",
		Version:     "v1",
		Resource:    "secrets",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "watch",
		Group:       "",
		Version:     "v1",
		Resource:    "secrets",
		Subresource: "",
		Name:        "",
	},
}

View Source

var UpgraderPostsyncRequiredPermissions = []authorizationv1.ResourceAttributes{

	{
		Namespace:   NV_NAMESPACE,
		Verb:        "get",
		Group:       "",
		Resource:    "secrets",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "update",
		Group:       "",
		Resource:    "secrets",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "list",
		Group:       "",
		Resource:    "secrets",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "watch",
		Group:       "",
		Resource:    "secrets",
		Subresource: "",
		Name:        "",
	},

	{
		Namespace:   NV_NAMESPACE,
		Verb:        "get",
		Group:       "",
		Resource:    "pods",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "list",
		Group:       "",
		Resource:    "pods",
		Subresource: "",
		Name:        "",
	},

	{
		Namespace:   NV_NAMESPACE,
		Verb:        "get",
		Group:       "apps",
		Resource:    "deployments",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "list",
		Group:       "apps",
		Resource:    "deployments",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "watch",
		Group:       "apps",
		Resource:    "deployments",
		Subresource: "",
		Name:        "",
	},

	{
		Namespace:   NV_NAMESPACE,
		Verb:        "get",
		Group:       "apps",
		Resource:    "daemonsets",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "list",
		Group:       "apps",
		Resource:    "daemonsets",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "watch",
		Group:       "apps",
		Resource:    "daemonsets",
		Subresource: "",
		Name:        "",
	},

	{
		Namespace:   NV_NAMESPACE,
		Verb:        "update",
		Group:       "batch",
		Resource:    "cronjobs",
		Subresource: "",
		Name:        "",
	},
}

View Source

var UpgraderPresyncRequiredPermissions = []authorizationv1.ResourceAttributes{

	{
		Namespace:   NV_NAMESPACE,
		Verb:        "create",
		Group:       "batch",
		Resource:    "jobs",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "get",
		Group:       "batch",
		Resource:    "jobs",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "delete",
		Group:       "batch",
		Resource:    "jobs",
		Subresource: "",
		Name:        "",
	},

	{
		Namespace:   NV_NAMESPACE,
		Verb:        "update",
		Group:       "batch",
		Resource:    "cronjobs",
		Subresource: "",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "patch",
		Group:       "batch",
		Resource:    "cronjobs",
		Subresource: "",
		Name:        "",
	},

	{
		Namespace:   NV_NAMESPACE,
		Verb:        "update",
		Group:       "batch",
		Resource:    "cronjobs",
		Subresource: "finalizers",
		Name:        "",
	},
	{
		Namespace:   NV_NAMESPACE,
		Verb:        "patch",
		Group:       "batch",
		Resource:    "cronjobs",
		Subresource: "finalizers",
		Name:        "",
	},
}

Functions ¶

func CanI ¶

func CanI(clientset *kubernetes.Clientset, ra authorizationv1.ResourceAttributes, namespace string) (bool, error)

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL