GO-2024-3128: OpenShift Controller Manager Improper Privilege Management in github.com/openshift/openshift-controller-manager

openshift-controller-manager

module

v0.0.0-alpha.0....-f299e54 Latest Latest Go to latest Published: Nov 4, 2024 License: Apache-2.0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/openshift/openshift-controller-manager

Links

Open Source Insights

README ¶

OpenShift Controller Manager

The OpenShift Controller Manager (OCM) is comprised of multiple controllers, many of which correspond to a top-level OpenShift API object, watching for changes and acting accordingly. The controllers are generally organized by API group:

apps.openshift.io - OpenShift-specific workloads, like DeploymentConfig.
build.openshift.io - OpenShift Builds and BuildConfigs.
image.openshift.io - ImageStreams and Images.
project.openshift.io - Projects, OpenShift's wrapper for Namespaces.
template.openshift.io - OpenShift Templates - a simple way to deploy applications.

There are additional controllers which add OpenShift-specific capabilities to the cluster:

authorization - provides default service account role bindings for OpenShift projects.
serviceaccounts - manages secrets that allow images to be pulled and pushed from the OpenShift image registry.
unidling - manages unidling of applications when inbound network traffic is detected. See the OpenShift docs for more information.

Metrics

Many of the controllers expose metrics which are visible in the default OpenShift monitoring system (Prometheus). See metrics for a detailed list of exposed metrics for each API group.

Directories ¶

Path	Synopsis
cmd
openshift-controller-manager
dependencymagnet
pkg
apps/appstest
apps/deployer
apps/deploymentconfig
apps/metrics/prometheus Package prometheus contains code for injecting apps related metrics into the prometheus registry running in the openshift master	Package prometheus contains code for injecting apps related metrics into the prometheus registry running in the openshift master
authorization/defaultrolebindings
build/buildscheme
build/buildutil
build/controller/build
build/controller/build/defaults Package defaults contains the BuildDefaults admission control plugin.	Package defaults contains the BuildDefaults admission control plugin.
build/controller/build/overrides Package overrides contains the BuildOverrides admission control plugin.	Package overrides contains the BuildOverrides admission control plugin.
build/controller/buildconfig
build/controller/common
build/controller/common/internal/expansion
build/controller/common/testutil
build/controller/policy
build/controller/strategy
build/metrics/prometheus Package prometheus contains code for injecting build related metrics into the prometheus registry running in the openshift master	Package prometheus contains code for injecting build related metrics into the prometheus registry running in the openshift master
cmd/controller
cmd/imageformat
cmd/openshift-controller-manager
image/controller
image/controller/signature
image/controller/trigger
image/metrics/prometheus
image/trigger
image/trigger/annotations
image/trigger/buildconfigs
image/trigger/deploymentconfigs
internalregistry/controllers
project/controller
serviceaccounts/controllers
serviceaccounts/controllers/rollback
template/controller
unidling/controller
unidling/metrics Package metrics contains code for unidling controller metrics	Package metrics contains code for unidling controller metrics
version

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL