Affected by GO-2022-0617
and 20 other vulnerabilities
GO-2022-0617 : WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes
GO-2022-0703 : XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes
GO-2022-0802 : Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes
GO-2022-0867 : Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes
GO-2022-0885 : Improper Authentication in Kubernetes in k8s.io/kubernetes
GO-2022-0890 : Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes
GO-2022-0907 : Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes
GO-2022-0910 : Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes
GO-2022-0983 : kubectl ANSI escape characters not filtered in k8s.io/kubernetes
GO-2023-1864 : Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes
GO-2023-1891 : kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes
GO-2023-1892 : Kubernetes mountable secrets policy bypass in k8s.io/kubernetes
GO-2023-2159 : Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes
GO-2023-2170 : Kubernetes privilege escalation vulnerability in k8s.io/kubernetes
GO-2023-2330 : Kubernetes privilege escalation vulnerability in k8s.io/kubernetes
GO-2023-2341 : Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes
GO-2024-2748 : Privilege Escalation in Kubernetes in k8s.io/apimachinery
GO-2024-2753 : Denial of service in Kubernetes in k8s.io/kubernetes
GO-2024-2754 : Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes
GO-2024-2755 : Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes
GO-2024-2994 : Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
Discover Packages
k8s.io/kubernetes
test
e2e
framework
ssh
package
Version:
v1.15.4
Opens a new window with list of versions in this module.
Published: Sep 13, 2019
License: Apache-2.0
Opens a new window with license information.
Imports: 15
Opens a new window with list of imports.
Imported by: 39
Opens a new window with list of known importers.
Documentation
Documentation
¶
func GetSigner(provider string) (ssh.Signer, error)
func IssueSSHCommand(cmd, provider string, node *v1.Node) error
func LogResult(result Result)
func NodeSSHHosts(c clientset.Interface) ([]string, error)
func RunSSHCommandViaBastion(cmd, user, bastion, host string, signer ssh.Signer) (string, string, int, error)
type Result
GetSigner returns an ssh.Signer for the provider ("gce", etc.) that can be
used to SSH to their nodes.
IssueSSHCommand tries to execute a SSH command
LogResult records result log
NodeSSHHosts returns SSH-able host names for all schedulable nodes - this
excludes master node. If it can't find any external IPs, it falls back to
looking for internal IPs. If it can't find an internal IP for every node it
returns an error, though it still returns all hosts that it found in that
case.
RunSSHCommandViaBastion returns the stdout, stderr, and exit code from running cmd on
host as specific user, along with any SSH-level error. It uses an SSH proxy to connect
to bastion, then via that tunnel connects to the remote host. Similar to
sshutil.RunSSHCommand but scoped to the needs of the test infrastructure.
Result holds the execution result of SSH command
IssueSSHCommandWithResult tries to execute a SSH command and returns the execution result
NodeExec execs the given cmd on node via SSH. Note that the nodeName is an sshable name,
eg: the name returned by framework.GetMasterHost(). This is also not guaranteed to work across
cloud providers since it involves ssh.
SSH synchronously SSHs to a node running on provider and runs cmd. If there
is no error performing the SSH, the stdout, stderr, and exit code are
returned.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.