Affected by GO-2024-2535 and 13 other vulnerabilities

GO-2024-2535: Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core' in github.com/rancher/rancher

GO-2024-2537: Rancher 'Audit Log' leaks sensitive information in github.com/rancher/rancher

GO-2024-2760: Rancher's Failure to delete orphaned role bindings does not revoke project level access from group based authentication in github.com/rancher/rancher

GO-2024-2761: Rancher Login Parameter Can Be Edited in github.com/rancher/rancher

GO-2024-2768: Rancher does not properly specify ApiGroup when creating Kubernetes RBAC resources in github.com/rancher/rancher

GO-2024-2771: Rancher's Steve API Component Improper authorization check allows privilege escalation in github.com/rancher/rancher

GO-2024-2778: Rancher Privilege escalation vulnerability via malicious "Connection" header in github.com/rancher/rancher

GO-2024-2929: Rancher's External RoleTemplates can lead to privilege escalation in github.com/rancher/rancher

GO-2024-2931: Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider in github.com/rancher/rancher

GO-2024-2932: Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec in github.com/rancher/rancher

GO-2024-3161: Rancher agents can be hijacked by taking over the Rancher Server URL in github.com/rancher/rancher

GO-2024-3220: Rancher allows privilege escalation in Windows nodes due to Insecure Access Control Lists in github.com/rancher/rancher

GO-2024-3221: Rancher Remote Code Execution via Cluster/Node Drivers in github.com/rancher/rancher

GO-2024-3223: Exposure of vSphere's CPI and CSI credentials in Rancher in github.com/rancher/rancher

providers

package

v2.2.9-rc2+incompatible Latest Latest Go to latest Published: Oct 14, 2019 License: Apache-2.0 Imports: 20 Imported by: 321

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/rancher/rancher

Documentation ¶

Index ¶

Variables
func AuthenticateUser(input interface{}, providerName string) (v3.Principal, []v3.Principal, string, error)
func CanAccessWithGroupProviders(providerName string, userPrincipalID string, groups []v3.Principal) (bool, error)
func Configure(ctx context.Context, mgmt *config.ScaledContext)
func GetPrincipal(principalID string, myToken v3.Token) (v3.Principal, error)
func GetProvider(providerName string) (common.AuthProvider, error)
func GetProviderByType(configType string) common.AuthProvider
func RefetchGroupPrincipals(principalID string, providerName string, secret string) ([]v3.Principal, error)
func SearchPrincipals(name, principalType string, myToken v3.Token) ([]v3.Principal, error)
func SetupAuthConfig(ctx context.Context, management *config.ScaledContext, schemas *types.Schemas)

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	ProviderNames          = make(map[string]bool)
	ProvidersWithSecrets   = make(map[string]bool)
	UnrefreshableProviders = make(map[string]bool)

	LocalProvider = "local"
)

Functions ¶

func AuthenticateUser ¶

func AuthenticateUser(input interface{}, providerName string) (v3.Principal, []v3.Principal, string, error)

func CanAccessWithGroupProviders ¶

func CanAccessWithGroupProviders(providerName string, userPrincipalID string, groups []v3.Principal) (bool, error)

func Configure ¶

func Configure(ctx context.Context, mgmt *config.ScaledContext)

func GetPrincipal ¶

func GetPrincipal(principalID string, myToken v3.Token) (v3.Principal, error)

func GetProvider ¶

func GetProvider(providerName string) (common.AuthProvider, error)

func GetProviderByType ¶

func GetProviderByType(configType string) common.AuthProvider

func RefetchGroupPrincipals ¶

func RefetchGroupPrincipals(principalID string, providerName string, secret string) ([]v3.Principal, error)

func SearchPrincipals ¶

func SearchPrincipals(name, principalType string, myToken v3.Token) ([]v3.Principal, error)

func SetupAuthConfig ¶

func SetupAuthConfig(ctx context.Context, management *config.ScaledContext, schemas *types.Schemas)

Types ¶

This section is empty.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
activedirectory
azure
common
ldap
github
ldap
local
publicapi
saml

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL