Affected by GO-2023-1804 and 2 other vulnerabilities

GO-2023-1804: Kyverno vulnerable due to usage of insecure cipher in github.com/kyverno/kyverno

GO-2023-1819: Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno

GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

admission

package

v1.9.1-rc.1 Latest Latest Go to latest Published: Mar 6, 2023 License: Apache-2.0 Imports: 10 Imported by: 1

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/kyverno/kyverno

Documentation ¶

Index ¶

func ConvertResource(raw []byte, group, version, kind, namespace string) (unstructured.Unstructured, error)
func ExtractResources(newRaw []byte, request *admissionv1.AdmissionRequest) (unstructured.Unstructured, unstructured.Unstructured, error)
func GetCleanupPolicies(request *admissionv1.AdmissionRequest) (kyvernov2alpha1.CleanupPolicyInterface, kyvernov2alpha1.CleanupPolicyInterface, ...)
func GetPolicies(request *admissionv1.AdmissionRequest) (kyvernov1.PolicyInterface, kyvernov1.PolicyInterface, error)
func GetPolicy(request *admissionv1.AdmissionRequest) (kyvernov1.PolicyInterface, error)
func GetPolicyExceptions(request *admissionv1.AdmissionRequest) (*kyvernov2alpha1.PolicyException, *kyvernov2alpha1.PolicyException, error)
func GetResourceName(request *admissionv1.AdmissionRequest) string
func MutationResponse(uid types.UID, patch []byte, warnings ...string) *admissionv1.AdmissionResponse
func Response(uid types.UID, err error, warnings ...string) *admissionv1.AdmissionResponse
func ResponseSuccess(uid types.UID, warnings ...string) *admissionv1.AdmissionResponse
func UnmarshalCleanupPolicy(kind string, raw []byte) (kyvernov2alpha1.CleanupPolicyInterface, error)
func UnmarshalPolicy(kind string, raw []byte) (kyvernov1.PolicyInterface, error)
func UnmarshalPolicyException(raw []byte) (*kyvernov2alpha1.PolicyException, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ConvertResource ¶ added in v1.9.0

func ConvertResource(raw []byte, group, version, kind, namespace string) (unstructured.Unstructured, error)

ConvertResource converts raw bytes to an unstructured object

func ExtractResources ¶ added in v1.9.0

func ExtractResources(newRaw []byte, request *admissionv1.AdmissionRequest) (unstructured.Unstructured, unstructured.Unstructured, error)

ExtractResources extracts the new and old resource as unstructured

func GetCleanupPolicies ¶ added in v1.9.0

func GetCleanupPolicies(request *admissionv1.AdmissionRequest) (kyvernov2alpha1.CleanupPolicyInterface, kyvernov2alpha1.CleanupPolicyInterface, error)

func GetPolicies ¶

func GetPolicies(request *admissionv1.AdmissionRequest) (kyvernov1.PolicyInterface, kyvernov1.PolicyInterface, error)

func GetPolicy ¶

func GetPolicy(request *admissionv1.AdmissionRequest) (kyvernov1.PolicyInterface, error)

func GetPolicyExceptions ¶ added in v1.9.0

func GetPolicyExceptions(request *admissionv1.AdmissionRequest) (*kyvernov2alpha1.PolicyException, *kyvernov2alpha1.PolicyException, error)

func GetResourceName ¶

func GetResourceName(request *admissionv1.AdmissionRequest) string

func MutationResponse ¶ added in v1.8.2

func MutationResponse(uid types.UID, patch []byte, warnings ...string) *admissionv1.AdmissionResponse

func Response ¶

func Response(uid types.UID, err error, warnings ...string) *admissionv1.AdmissionResponse

func ResponseSuccess ¶

func ResponseSuccess(uid types.UID, warnings ...string) *admissionv1.AdmissionResponse

func UnmarshalCleanupPolicy ¶ added in v1.9.0

func UnmarshalCleanupPolicy(kind string, raw []byte) (kyvernov2alpha1.CleanupPolicyInterface, error)

func UnmarshalPolicy ¶

func UnmarshalPolicy(kind string, raw []byte) (kyvernov1.PolicyInterface, error)

func UnmarshalPolicyException ¶ added in v1.9.0

func UnmarshalPolicyException(raw []byte) (*kyvernov2alpha1.PolicyException, error)

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL