GO-2024-3360: OpenShift Hive RCE through AWS/Kubernetes client configuration leads to privilege escalation in github.com/openshift/hive

hive

module

v1.1.16 Latest Latest Go to latest Published: Sep 3, 2021 License: Apache-2.0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/openshift/hive

Links

Open Source Insights

README ¶

OpenShift Hive

API driven OpenShift 4 cluster provisioning and management.

Hive is an operator which runs as a service on top of Kubernetes/OpenShift. The Hive service can be used to provision and perform initial configuration of OpenShift clusters.

For provisioning OpenShift, Hive uses the OpenShift installer.

Supported cloud providers

AWS
Azure
Google Cloud Platform
OpenStack
oVirt
vSphere

In the future Hive will support more cloud providers.

Documentation

Quick Start Guide
Installation
Using Hive
- Cluster Hibernation
- Cluster Pools
Hiveutil CLI
Scaling Hive
Developing Hive
Frequently Asked Questions
Troubleshooting
Architecture

Directories ¶

Path	Synopsis
apis module
cmd
hiveadmission
manager
operator
contrib
cmd/hiveutil
cmd/waitforjob
pkg/adm
pkg/adm/managedns
pkg/certificate
pkg/clusterpool
pkg/createcluster
pkg/deprovision
pkg/report
pkg/testresource
pkg/utils
pkg/utils/aws
pkg/utils/azure
pkg/utils/gcp
pkg/utils/openstack
pkg/utils/ovirt
pkg/verification
pkg/version
pkg
awsclient
awsclient/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
azureclient
azureclient/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
certs
client/clientset/versioned This package has the automatically generated clientset.	This package has the automatically generated clientset.
client/clientset/versioned/fake This package has the automatically generated fake clientset.	This package has the automatically generated fake clientset.
client/clientset/versioned/scheme This package contains the scheme of the automatically generated clientset.	This package contains the scheme of the automatically generated clientset.
client/clientset/versioned/typed/hive/v1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
client/clientset/versioned/typed/hive/v1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
client/clientset/versioned/typed/hiveinternal/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
client/clientset/versioned/typed/hiveinternal/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
client/informers/externalversions
client/informers/externalversions/hive
client/informers/externalversions/hive/v1
client/informers/externalversions/hiveinternal
client/informers/externalversions/hiveinternal/v1alpha1
client/informers/externalversions/internalinterfaces
client/listers/hive/v1
client/listers/hiveinternal/v1alpha1
clusterresource
constants
controller/argocdregister Package argocdregister provides a controller which ensures provisioned clusters are added to the ArgoCD cluster registry, and removed when the cluster is deprovisioned.	Package argocdregister provides a controller which ensures provisioned clusters are added to the ArgoCD cluster registry, and removed when the cluster is deprovisioned.
controller/awsprivatelink
controller/clusterclaim
controller/clusterdeployment
controller/clusterdeprovision
controller/clusterpool
controller/clusterpoolnamespace
controller/clusterprovision
controller/clusterrelocate
controller/clusterstate
controller/clustersync
controller/clusterversion
controller/controlplanecerts
controller/dnsendpoint
controller/dnsendpoint/nameserver
controller/dnsendpoint/nameserver/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
controller/dnszone
controller/fakeclusterinstall
controller/hibernation
controller/hibernation/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
controller/images
controller/machinemanagement
controller/metrics
controller/remoteingress
controller/remotemachineset
controller/remotemachineset/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
controller/syncidentityprovider
controller/unreachable Package unreachable provides a controller which periodically checks if a remote cluster is reachable and maintains a condition on the cluster as a result.	Package unreachable provides a controller which periodically checks if a remote cluster is reachable and maintains a condition on the cluster as a result.
controller/utils
controller/velerobackup
gcpclient
gcpclient/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
imageset
install
installmanager
manageddns
operator
operator/assets Code generated for package assets by go-bindata DO NOT EDIT.	Code generated for package assets by go-bindata DO NOT EDIT.
operator/hive
operator/metrics
operator/util
remoteclient
remoteclient/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
resource
resource/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
test/assert
test/checkpoint
test/clusterclaim
test/clusterdeployment
test/clusterdeprovision
test/clusterpool
test/clusterrelocate
test/clustersync
test/configmap
test/dnszone
test/generic
test/job
test/machinepool
test/manager
test/manager/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
test/namespace
test/persistentvolumeclaim
test/secret
test/selectorsyncset
test/statefulset
test/syncidentityprovider
test/syncset
util/annotations
util/contracts
util/labels
util/logrus
validating-webhooks/hive/v1
version
test
e2e/common
v1alpha1apiserver module

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL