Affected by GO-2022-0375 and 9 other vulnerabilities

GO-2022-0375: Improper Access Control in github.com/treeverse/lakefs

GO-2022-1019: lakeFS vulnerable to authenticated users deleting files they are not authorized to delete in github.com/treeverse/lakefs

GO-2023-2012: lakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files in github.com/treeverse/lakefs

GO-2023-2397: User with permission to write actions can impersonate another user when auth token is configured in environment variable in github.com/treeverse/lakefs

GO-2023-2398: lakeFS logs S3 credentials in plain text in github.com/treeverse/lakefs

GO-2024-3291: Re-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to its deletion in github.com/treeverse/lakefs

GO-2025-3479: lakeFS allows an authenticated user to cause a crash by exhausting server memory in github.com/treeverse/lakefs

GO-2025-4090: lakeFS affected by unauthenticated access to API usage metrics in github.com/treeverse/lakefs

GO-2026-4321: lakeFS is Missing Timestamp Validation in S3 Gateway Authentication in github.com/treeverse/lakefs

GO-2026-4494: lakeFS vulnerable to path traversal in local block adapter allow cross-namespace and sibling directory access in github.com/treeverse/lakefs

config

package

v0.1.7-test Latest Latest Go to latest Published: Jan 25, 2022 License: Apache-2.0 Imports: 7 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/treeverse/lakefs

Links

Open Source Insights

Documentation ¶

Constants ¶

View Source

const (
	// Default flag keys
	HiveDBLocationURIKey       = "metastore.hive.db_location_uri"
	ConfigServerEndpointURLKey = "server.endpoint_url"
	ConfigAccessKeyIDKey       = "credentials.access_key_id"
	ConfigSecretAccessKey      = "credentials.secret_access_key"

	// Defaults
	DefaultHiveDBLocationURI = "file:/user/hive/warehouse/"
	DefaultServerEndpointURL = "http://127.0.0.1:8000"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Config ¶

type Config struct {
	Values configuration
	// contains filtered or unexported fields
}

Config is the currently-loaded configuration. Its error state supports being able to run `lakectl config' without a valid configuration.

func ReadConfig ¶

func ReadConfig() (c *Config)

ReadConfig loads according to the current viper configuration into a Config, which will have non-nil Err() if loading fails.

func (*Config) Err ¶

func (c *Config) Err() error

func (*Config) GetFixSparkPlaceholder ¶ added in v0.45.1

func (c *Config) GetFixSparkPlaceholder() bool

func (*Config) GetGlueDBLocationURI ¶ added in v0.40.3

func (c *Config) GetGlueDBLocationURI() string

func (*Config) GetHiveDBLocationURI ¶ added in v0.40.3

func (c *Config) GetHiveDBLocationURI() string

func (*Config) GetMetastoreAwsConfig ¶

func (c *Config) GetMetastoreAwsConfig() *aws.Config

func (*Config) GetMetastoreGlueCatalogID ¶

func (c *Config) GetMetastoreGlueCatalogID() string

func (*Config) GetMetastoreHiveURI ¶

func (c *Config) GetMetastoreHiveURI() string

func (*Config) GetMetastoreType ¶

func (c *Config) GetMetastoreType() string

Source Files ¶

View all Source files

config.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL