argocdagentprincipal

package

Versions in this module

v1

v1.20.0

Mar 5, 2026 GO-2025-3427 +1 more

GO-2025-3427: Malicious PrometheusRule creation to all namespaces that deploy a ArgoCD CR instance in github.com/redhat-developer/gitops-operator

GO-2025-4242: OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources in github.com/redhat-developer/gitops-operator

Changes in this version

+ func CreateClusterRegistrationSecret(cfg ClusterRegistrationSecretConfig)

+ func CreateRequiredAgentSecrets(cfg AgentSecretsConfig)

+ func CreateRequiredSecrets(cfg PrincipalSecretsConfig)

+ func VerifyExpectedResourcesExist(params VerifyExpectedResourcesExistParams)

+ func VerifyLogs(deploymentName, namespace string, requiredMessages []string)

+ func VerifyResourcesDeleted(resources PrincipalResources)

+ type AgentSecretNames struct

+ JWTSecretName string

+ PrincipalTLSSecretName string

+ RedisInitialPasswordSecretName string

+ ResourceProxyTLSSecretName string

+ RootCASecretName string

+ type AgentSecretsConfig struct

+ AgentNamespace *corev1.Namespace

+ AgentRootCASecretName string

+ ClientCommonName string

+ ClientDNSNames []string

+ ClientTLSSecretName string

+ PrincipalNamespaceName string

+ PrincipalRootCASecretName string

+ type ClusterRegistrationSecretConfig struct

+ AgentName string

+ AgentNamespaceName string

+ AgentTLSSecretName string

+ PrincipalNamespaceName string

+ PrincipalRootCASecretName string

+ ResourceProxyPort int32

+ ResourceProxyServiceName string

+ Server string

+ type PrincipalResources struct

+ ArgoCDAgentPrincipalName string

+ ArgoCDName string

+ ClusterRole *rbacv1.ClusterRole

+ ClusterRoleBinding *rbacv1.ClusterRoleBinding

+ PrincipalDeployment *appsv1.Deployment

+ PrincipalNamespaceName string

+ PrincipalNetworkPolicy *networkingv1.NetworkPolicy

+ PrincipalRoute *routev1.Route

+ Role *rbacv1.Role

+ RoleBinding *rbacv1.RoleBinding

+ ServiceAccount *corev1.ServiceAccount

+ ServicesToDelete []string

+ type PrincipalSecretsConfig struct

+ AdditionalPrincipalSANs []string

+ AdditionalResourceProxySANs []string

+ JWTSecretName string

+ PrincipalNamespaceName string

+ PrincipalServiceName string

+ PrincipalTLSSecretName string

+ ResourceProxyServiceName string

+ ResourceProxyTLSSecretName string

+ RootCASecretName string

+ type VerifyExpectedResourcesExistParams struct

+ ArgoCDAgentPrincipalName string

+ ArgoCDName string

+ ClusterRole *rbacv1.ClusterRole

+ ClusterRoleBinding *rbacv1.ClusterRoleBinding

+ DeploymentNames []string

+ ExpectRoute *bool

+ Namespace *corev1.Namespace

+ PrincipalDeployment *appsv1.Deployment

+ PrincipalNetworkPolicy *networkingv1.NetworkPolicy

+ PrincipalRoute *routev1.Route

+ Role *rbacv1.Role

+ RoleBinding *rbacv1.RoleBinding

+ SecretNames AgentSecretNames

+ ServiceAccount *corev1.ServiceAccount

+ ServiceNames []string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL