Affected by GO-2022-0617 and 12 other vulnerabilities

GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

GO-2022-0983: ANSI escape characters not filtered in kubectl in k8s.io/kubernetes

GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

GO-2023-1891: Vulnerable to policy bypass in kube-apiserver in k8s.io/kubernetes

GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

GO-2025-3465: Node Denial of Service via kubelet Checkpoint API in k8s.io/kubernetes

GO-2025-3521: Kubernetes GitRepo Volume Inadvertent Local Repository Access in k8s.io/kubernetes

GO-2025-3522: Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API in k8s.io/kubernetes

GO-2025-3547: Kubernetes kube-apiserver Vulnerable to Race Condition in k8s.io/kubernetes

GO-2025-3915: Kubernetes Nodes can delete themselves by adding an OwnerReference in k8s.io/kubernetes

priority

package

v1.21.8-rc.0 Latest Latest Go to latest Published: Nov 17, 2021 License: Apache-2.0 Imports: 16 Imported by: 32

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kubernetes/kubernetes

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func Register(plugins *admission.Plugins)
type Plugin
- func NewPlugin() *Plugin

Constants ¶

View Source

const (
	// PluginName indicates name of admission plugin.
	PluginName = "Priority"
)

Variables ¶

This section is empty.

Functions ¶

func Register ¶

func Register(plugins *admission.Plugins)

Register registers a plugin

Types ¶

type Plugin ¶ added in v1.17.0

type Plugin struct {
	*admission.Handler
	// contains filtered or unexported fields
}

Plugin is an implementation of admission.Interface.

func NewPlugin ¶

func NewPlugin() *Plugin

NewPlugin creates a new priority admission plugin.

func (*Plugin) Admit ¶ added in v1.17.0

func (p *Plugin) Admit(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) error

Admit checks Pods and admits or rejects them. It also resolves the priority of pods based on their PriorityClass. Note that pod validation mechanism prevents update of a pod priority.

func (*Plugin) InspectFeatureGates ¶ added in v1.17.0

func (p *Plugin) InspectFeatureGates(featureGates featuregate.FeatureGate)

InspectFeatureGates allows setting bools without taking a dep on a global variable

func (*Plugin) SetExternalKubeClientSet ¶ added in v1.17.0

func (p *Plugin) SetExternalKubeClientSet(client kubernetes.Interface)

SetExternalKubeClientSet implements the WantsInternalKubeClientSet interface.

func (*Plugin) SetExternalKubeInformerFactory ¶ added in v1.17.0

func (p *Plugin) SetExternalKubeInformerFactory(f informers.SharedInformerFactory)

SetExternalKubeInformerFactory implements the WantsInternalKubeInformerFactory interface.

func (*Plugin) Validate ¶ added in v1.17.0

func (p *Plugin) Validate(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) error

Validate checks PriorityClasses and admits or rejects them.

func (*Plugin) ValidateInitialization ¶ added in v1.17.0

func (p *Plugin) ValidateInitialization() error

ValidateInitialization implements the InitializationValidator interface.

Source Files ¶

View all Source files

admission.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL