Affected by GO-2022-0617 and 2 other vulnerabilities

GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

GO-2025-3521: Kubernetes GitRepo Volume Inadvertent Local Repository Access in k8s.io/kubernetes

GO-2025-3547: Kubernetes kube-apiserver Vulnerable to Race Condition in k8s.io/kubernetes

node

package

v1.35.0-beta.0 Latest Latest Go to latest Published: Nov 19, 2025 License: Apache-2.0 Imports: 82 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kubernetes/kubernetes

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
func GetContainerStartedTime(p *v1.Pod, containerName string) (time.Time, error)
func GetTransitionTimeForReadyCondition(p *v1.Pod) (time.Time, error)
func ImagePullTest(ctx context.Context, f *framework.Framework, image string, ...) *v1.Pod
func RunLivenessTest(ctx context.Context, f *framework.Framework, pod *v1.Pod, ...)
func RunSidecarLivenessTest(ctx context.Context, f *framework.Framework, pod *v1.Pod, ...)
func VerifyPodLevelStatus(gotPod *v1.Pod) error
type ConformanceContainer
type ContainerState
- func GetContainerState(state v1.ContainerState) ContainerState
type KubeletManagedHostConfig
type PrivilegedPodTestConfig
type UserNamespacedPodsMetrics

Constants ¶

View Source

const (
	// ContainerStatusRetryTimeout represents polling threshold before giving up to get the container status
	ContainerStatusRetryTimeout = time.Minute * 5
	// ContainerStatusPollInterval represents duration between polls to get the container status
	ContainerStatusPollInterval = time.Second * 1
)

Variables ¶

View Source

var SIGDescribe = framework.SIGDescribe("node")

Functions ¶

func GetContainerStartedTime ¶

func GetContainerStartedTime(p *v1.Pod, containerName string) (time.Time, error)

GetContainerStartedTime returns the time when the given container started and error if any

func GetTransitionTimeForReadyCondition ¶

func GetTransitionTimeForReadyCondition(p *v1.Pod) (time.Time, error)

GetTransitionTimeForReadyCondition returns the time when the given pod became ready and error if any

func ImagePullTest ¶

func ImagePullTest(ctx context.Context, f *framework.Framework, image string, imagePullPolicy v1.PullPolicy, pullSecret *v1.Secret, nodeName string, expectedPhase v1.PodPhase, expectedPullStatus bool) *v1.Pod

Images used by imagePullTest are not added to NodePrePullImageList because this test is specifically testing image pulling behavior. The containers use ImagePullPolicy values other than PullNever, so the framework allows them to be pulled during the test.

func RunLivenessTest ¶

func RunLivenessTest(ctx context.Context, f *framework.Framework, pod *v1.Pod, expectNumRestarts int, timeout time.Duration)

func RunSidecarLivenessTest ¶ added in v1.28.0

func RunSidecarLivenessTest(ctx context.Context, f *framework.Framework, pod *v1.Pod, expectNumRestarts int, timeout time.Duration)

func VerifyPodLevelStatus ¶

func VerifyPodLevelStatus(gotPod *v1.Pod) error

Types ¶

type ConformanceContainer ¶

type ConformanceContainer struct {
	Container        v1.Container
	RestartPolicy    v1.RestartPolicy
	Volumes          []v1.Volume
	ImagePullSecrets []string
	NodeName         string

	PodClient *e2epod.PodClient

	PodSecurityContext *v1.PodSecurityContext
	// contains filtered or unexported fields
}

ConformanceContainer defines the types for running container conformance test cases One pod one container

func (*ConformanceContainer) Create ¶

func (cc *ConformanceContainer) Create(ctx context.Context) *v1.Pod

Create creates the defined conformance container

func (*ConformanceContainer) Delete ¶

func (cc *ConformanceContainer) Delete(ctx context.Context) error

Delete deletes the defined conformance container

func (*ConformanceContainer) GetPhase ¶

func (cc *ConformanceContainer) GetPhase(ctx context.Context) (v1.PodPhase, error)

GetPhase returns the phase of the pod lifecycle and error if any

func (*ConformanceContainer) GetStatus ¶

func (cc *ConformanceContainer) GetStatus(ctx context.Context) (v1.ContainerStatus, error)

GetStatus returns the details of the current status of this container and error if any

func (*ConformanceContainer) IsReady ¶

func (cc *ConformanceContainer) IsReady(ctx context.Context) (bool, error)

IsReady returns whether this container is ready and error if any

func (*ConformanceContainer) Present ¶

func (cc *ConformanceContainer) Present(ctx context.Context) (bool, error)

Present returns whether this pod is present and error if any

type ContainerState ¶

type ContainerState string

ContainerState represents different states of its lifecycle

const (
	// ContainerStateWaiting represents 'Waiting' container state
	ContainerStateWaiting ContainerState = "Waiting"
	// ContainerStateRunning represents 'Running' container state
	ContainerStateRunning ContainerState = "Running"
	// ContainerStateTerminated represents 'Terminated' container state
	ContainerStateTerminated ContainerState = "Terminated"
	// ContainerStateUnknown represents 'Unknown' container state
	ContainerStateUnknown ContainerState = "Unknown"
)

func GetContainerState ¶

func GetContainerState(state v1.ContainerState) ContainerState

GetContainerState returns current state the container represents among its lifecycle

type KubeletManagedHostConfig ¶

type KubeletManagedHostConfig struct {
	// contains filtered or unexported fields
}

KubeletManagedHostConfig defines the types for running managed etc hosts test cases

type PrivilegedPodTestConfig ¶

type PrivilegedPodTestConfig struct {
	// contains filtered or unexported fields
}

PrivilegedPodTestConfig is configuration struct for privileged pod test TODO: Merge with tests in security_context.go

type UserNamespacedPodsMetrics ¶ added in v1.34.0

type UserNamespacedPodsMetrics struct {
	StartedPods       int
	StartedPodsErrors int
}

Directories ¶

Path	Synopsis
framework
cgroups
podresize

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL