Affected by GO-2022-0502 and 2 other vulnerabilities

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

helm

package

v0.6.0-rc1 Latest Latest Go to latest Published: Dec 15, 2021 License: MPL-2.0 Imports: 19 Imported by: 0

Details

View Source

const ProfileAnnotation = "weave.works/profile"

ProfileAnnotation is the annotation that Helm charts must have to indicate that they provide a Profile.

View Source

var Profiles = func(v *repo.ChartVersion) bool {
	return hasAnnotation(v.Metadata, ProfileAnnotation)
}

Profiles is a predicate for scanning charts with the ProfileAnnotation.

This section is empty.

type ChartPredicate func(*repo.ChartVersion) bool

type ChartReference struct {
	Chart     string
	Version   string
	SourceRef helmv2beta1.CrossNamespaceObjectReference
}

ChartReference is a Helm chart reference, the SourceRef is a Flux SourceReference for the Helm chart.

type RepoManager struct {
	client.Client
	CacheDir string
	// contains filtered or unexported fields
}

RepoManager implements HelmRepoManager interface using the Helm library packages.

func NewRepoManager(kc client.Client, cacheDir string) *RepoManager

NewRepoManager creates and returns a new RepoManager.

func (h *RepoManager) GetCharts(ctx context.Context, hr *sourcev1beta1.HelmRepository, pred ChartPredicate) ([]*pb.Profile, error)

GetCharts filters charts using the provided predicate. TODO: Add caching based on the Status Artifact Revision.

func (h *RepoManager) GetValuesFile(ctx context.Context, helmRepo *sourcev1beta1.HelmRepository, c *ChartReference, filename string) ([]byte, error)

GetValuesFile fetches the value file from a chart.