Affected by GO-2026-4491 and 1 other vulnerabilities

GO-2026-4491: Unauthenticated Admission Webhook Endpoints in Yoke ATC in github.com/yokecd/yoke

GO-2026-4493: Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC in github.com/yokecd/yoke

host

package

v0.20.21 Latest Latest Go to latest Published: Jun 25, 2026 License: MIT Imports: 18 Imported by: 0

Details

This section is empty.

View Source

var ErrFeatureNotGranted = errors.New("feature not granted")

func BuildFunctionMap(client *k8s.Client) map[string]any

func CandidateResources(ctx context.Context) *xsync.Set[string]

func ExternalResources(ctx context.Context) []string

func InternalResources(ctx context.Context) *xsync.Set[string]

func ReleaseResources(ctx context.Context) *xsync.Set[string]

func SetReleaseResources(ctx context.Context, resources []*unstructured.Unstructured)

func WithClusterAccess(ctx context.Context, access ClusterAccessParams) context.Context

func WithOwner(ctx context.Context, owner string) context.Context

func WithReleaseTracking(ctx context.Context) context.Context

func WithResourceTracking(ctx context.Context) context.Context

type ClusterAccessParams struct {
	Enabled          bool
	ResourceMatchers []string
}

type HostDiscoverMappingFunc func(ctx context.Context, group, kind string) (*RestMapping, error)

func HostDiscoverMapping(client *k8s.Client) HostDiscoverMappingFunc

type HostLookupResourceFunc func(ctx context.Context, name, namespace, kind, apiVersion string) (*unstructured.Unstructured, error)

func HostLookupResource(client *k8s.Client) HostLookupResourceFunc

type RestMapping struct {
	Group      string
	Version    string
	Kind       string
	Resource   string
	Namespaced bool
}

type TrackedRelease struct {
	Candidate *xsync.Set[string]
	Release   *xsync.Set[string]
}

type TrackedResources struct {
	External *xsync.Set[string]
	Internal *xsync.Set[string]
}