Affected by GO-2022-0559 and 8 other vulnerabilities

GO-2022-0559: HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

GO-2022-0593: HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

GO-2022-0894: Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul

GO-2022-0895: HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul

GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

GO-2023-1851: HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

acl

package

v1.6.10 Latest Latest Go to latest Published: Nov 19, 2020 License: MPL-2.0 Imports: 7 Imported by: 196

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/hashicorp/consul

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func ExtractServiceIdentities(serviceIdents []string) ([]*api.ACLServiceIdentity, error)
func GetBindingRuleIDFromPartial(client *api.Client, partialID string) (string, error)
func GetPolicyIDByName(client *api.Client, name string) (string, error)
func GetPolicyIDFromPartial(client *api.Client, partialID string) (string, error)
func GetRoleIDByName(client *api.Client, name string) (string, error)
func GetRoleIDFromPartial(client *api.Client, partialID string) (string, error)
func GetRulesFromLegacyToken(client *api.Client, tokenID string, isSecret bool) (string, error)
func GetTokenIDFromPartial(client *api.Client, partialID string) (string, error)
func New() *cmd
func PrintAuthMethod(method *api.ACLAuthMethod, ui cli.Ui, showMeta bool)
func PrintAuthMethodListEntry(method *api.ACLAuthMethodListEntry, ui cli.Ui, showMeta bool)
func PrintBindingRule(rule *api.ACLBindingRule, ui cli.Ui, showMeta bool)
func PrintBindingRuleListEntry(rule *api.ACLBindingRule, ui cli.Ui, showMeta bool)
func PrintPolicy(policy *api.ACLPolicy, ui cli.Ui, showMeta bool)
func PrintPolicyListEntry(policy *api.ACLPolicyListEntry, ui cli.Ui, showMeta bool)
func PrintRole(role *api.ACLRole, ui cli.Ui, showMeta bool)
func PrintRoleListEntry(role *api.ACLRole, ui cli.Ui, showMeta bool)
func PrintToken(token *api.ACLToken, ui cli.Ui, showMeta bool)
func PrintTokenListEntry(token *api.ACLTokenListEntry, ui cli.Ui, showMeta bool)

Constants ¶

View Source

const TestKubernetesJWT_A = "" /* 834-byte string literal not displayed */

TestKubernetesJWT_A is a valid service account jwt extracted from a minikube setup.

{
  "iss": "kubernetes/serviceaccount",
  "kubernetes.io/serviceaccount/namespace": "default",
  "kubernetes.io/serviceaccount/secret.name": "admin-token-qlz42",
  "kubernetes.io/serviceaccount/service-account.name": "admin",
  "kubernetes.io/serviceaccount/service-account.uid": "738bc251-6532-11e9-b67f-48e6c8b8ecb5",
  "sub": "system:serviceaccount:default:admin"
}

View Source

const TestKubernetesJWT_B = "" /* 830-byte string literal not displayed */

TestKubernetesJWT_B is a valid service account jwt extracted from a minikube setup.

{ "iss": "kubernetes/serviceaccount", "kubernetes.io/serviceaccount/namespace": "default", "kubernetes.io/serviceaccount/secret.name": "demo-token-kmb9n", "kubernetes.io/serviceaccount/service-account.name": "demo", "kubernetes.io/serviceaccount/service-account.uid": "76091af4-4b56-11e9-ac4b-708b11801cbe", "sub": "system:serviceaccount:default:demo" }

Variables ¶

This section is empty.

Functions ¶

func ExtractServiceIdentities ¶ added in v1.5.0

func ExtractServiceIdentities(serviceIdents []string) ([]*api.ACLServiceIdentity, error)

func GetBindingRuleIDFromPartial ¶ added in v1.5.0

func GetBindingRuleIDFromPartial(client *api.Client, partialID string) (string, error)

func GetPolicyIDByName ¶

func GetPolicyIDByName(client *api.Client, name string) (string, error)

func GetPolicyIDFromPartial ¶

func GetPolicyIDFromPartial(client *api.Client, partialID string) (string, error)

func GetRoleIDByName ¶ added in v1.5.0

func GetRoleIDByName(client *api.Client, name string) (string, error)

func GetRoleIDFromPartial ¶ added in v1.5.0

func GetRoleIDFromPartial(client *api.Client, partialID string) (string, error)

func GetRulesFromLegacyToken ¶

func GetRulesFromLegacyToken(client *api.Client, tokenID string, isSecret bool) (string, error)

func GetTokenIDFromPartial ¶

func GetTokenIDFromPartial(client *api.Client, partialID string) (string, error)

func New ¶

func New() *cmd

func PrintAuthMethod ¶ added in v1.5.0

func PrintAuthMethod(method *api.ACLAuthMethod, ui cli.Ui, showMeta bool)

func PrintAuthMethodListEntry ¶ added in v1.5.0

func PrintAuthMethodListEntry(method *api.ACLAuthMethodListEntry, ui cli.Ui, showMeta bool)

func PrintBindingRule ¶ added in v1.5.0

func PrintBindingRule(rule *api.ACLBindingRule, ui cli.Ui, showMeta bool)

func PrintBindingRuleListEntry ¶ added in v1.5.0

func PrintBindingRuleListEntry(rule *api.ACLBindingRule, ui cli.Ui, showMeta bool)

func PrintPolicy ¶

func PrintPolicy(policy *api.ACLPolicy, ui cli.Ui, showMeta bool)

func PrintPolicyListEntry ¶

func PrintPolicyListEntry(policy *api.ACLPolicyListEntry, ui cli.Ui, showMeta bool)

func PrintRole ¶ added in v1.5.0

func PrintRole(role *api.ACLRole, ui cli.Ui, showMeta bool)

func PrintRoleListEntry ¶ added in v1.5.0

func PrintRoleListEntry(role *api.ACLRole, ui cli.Ui, showMeta bool)

func PrintToken ¶

func PrintToken(token *api.ACLToken, ui cli.Ui, showMeta bool)

func PrintTokenListEntry ¶

func PrintTokenListEntry(token *api.ACLTokenListEntry, ui cli.Ui, showMeta bool)

Types ¶

This section is empty.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
agenttokens
authmethod
create
delete
list
read
update
bindingrule
create
delete
list
read
update
bootstrap
policy
create
delete
list
read
update
role
create
delete
list
read
update
rules
token
clone
create
delete
list
read
update

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL