Affected by GO-2022-0617 and 2 other vulnerabilities

GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

GO-2025-3521: Kubernetes GitRepo Volume Inadvertent Local Repository Access in k8s.io/kubernetes

GO-2025-3547: Kubernetes kube-apiserver Vulnerable to Race Condition in k8s.io/kubernetes

nodedeclaredfeatures

package

v1.35.0-beta.0 Latest Latest Go to latest Published: Nov 19, 2025 License: Apache-2.0 Imports: 18 Imported by: 0

Details

View Source

const (
	// PluginName is the name of this admission controller plugin.
	PluginName = "NodeDeclaredFeatureValidator"
)

This section is empty.

func Register(plugins *admission.Plugins)

Register registers a plugin.

type Plugin struct {
	*admission.Handler
	// contains filtered or unexported fields
}

Plugin is an admission controller that validates pod updates against node capabilities.

func NewPlugin() (*Plugin, error)

New creates a new Plugin admission plugin

func (p *Plugin) InspectFeatureGates(featureGates featuregate.FeatureGate)

SetFeatures sets the feature gates for the plugin.

func (p *Plugin) SetExternalKubeInformerFactory(f informers.SharedInformerFactory)

SetExternalKubeInformerFactory sets the informer factory for the plugin.

func (p *Plugin) Validate(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) error

Validate is the core of the admission controller logic.

func (p *Plugin) ValidateInitialization() error

ValidateInitialization ensures that the plugin is properly initialized.