Affected by GO-2022-0617 and 10 other vulnerabilities

GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

validation

package

v1.19.0-alpha.2 Latest Latest Go to latest Published: Apr 21, 2020 License: Apache-2.0 Imports: 22 Imported by: 118

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kubernetes/kubernetes

Documentation ¶

Index ¶

func ValidateAPIEndpoint(c *kubeadm.APIEndpoint, fldPath *field.Path) field.ErrorList
func ValidateAPIServer(a *kubeadm.APIServer, fldPath *field.Path) field.ErrorList
func ValidateAbsolutePath(path string, fldPath *field.Path) field.ErrorList
func ValidateBootstrapTokens(bts []kubeadm.BootstrapToken, fldPath *field.Path) field.ErrorList
func ValidateCertSANs(altnames []string, fldPath *field.Path) field.ErrorList
func ValidateClusterConfiguration(c *kubeadm.ClusterConfiguration) field.ErrorList
func ValidateDiscovery(d *kubeadm.Discovery, fldPath *field.Path) field.ErrorList
func ValidateDiscoveryBootstrapToken(b *kubeadm.BootstrapTokenDiscovery, fldPath *field.Path) field.ErrorList
func ValidateDiscoveryFile(f *kubeadm.FileDiscovery, fldPath *field.Path) field.ErrorList
func ValidateDiscoveryKubeConfigPath(discoveryFile string, fldPath *field.Path) field.ErrorList
func ValidateDiscoveryTokenAPIServer(apiServer string, fldPath *field.Path) field.ErrorList
func ValidateEtcd(e *kubeadm.Etcd, fldPath *field.Path) field.ErrorList
func ValidateFeatureGates(featureGates map[string]bool, fldPath *field.Path) field.ErrorList
func ValidateHostPort(endpoint string, fldPath *field.Path) field.ErrorList
func ValidateIPFromString(ipaddr string, fldPath *field.Path) field.ErrorList
func ValidateIPNetFromString(subnetStr string, minAddrs int64, isDualStack bool, fldPath *field.Path) field.ErrorList
func ValidateIgnorePreflightErrors(ignorePreflightErrorsFromCLI, ignorePreflightErrorsFromConfigFile []string) (sets.String, error)
func ValidateInitConfiguration(c *kubeadm.InitConfiguration) field.ErrorList
func ValidateJoinConfiguration(c *kubeadm.JoinConfiguration) field.ErrorList
func ValidateJoinControlPlane(c *kubeadm.JoinControlPlane, fldPath *field.Path) field.ErrorList
func ValidateMixedArguments(flag *pflag.FlagSet) error
func ValidateNetworking(c *kubeadm.ClusterConfiguration, fldPath *field.Path) field.ErrorList
func ValidateNodeRegistrationOptions(nro *kubeadm.NodeRegistrationOptions, fldPath *field.Path) field.ErrorList
func ValidatePort(port int32, fldPath *field.Path) field.ErrorList
func ValidateSocketPath(socket string, fldPath *field.Path) field.ErrorList
func ValidateToken(token string, fldPath *field.Path) field.ErrorList
func ValidateTokenGroups(usages []string, groups []string, fldPath *field.Path) field.ErrorList
func ValidateTokenUsages(usages []string, fldPath *field.Path) field.ErrorList
func ValidateURLs(urls []string, requireHTTPS bool, fldPath *field.Path) field.ErrorList

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ValidateAPIEndpoint ¶ added in v1.8.0

func ValidateAPIEndpoint(c *kubeadm.APIEndpoint, fldPath *field.Path) field.ErrorList

ValidateAPIEndpoint validates API server's endpoint

func ValidateAPIServer ¶ added in v1.13.0

func ValidateAPIServer(a *kubeadm.APIServer, fldPath *field.Path) field.ErrorList

ValidateAPIServer validates a APIServer object and collects all encountered errors

func ValidateAbsolutePath ¶

func ValidateAbsolutePath(path string, fldPath *field.Path) field.ErrorList

ValidateAbsolutePath validates whether provided path is absolute or not

func ValidateBootstrapTokens ¶ added in v1.11.0

func ValidateBootstrapTokens(bts []kubeadm.BootstrapToken, fldPath *field.Path) field.ErrorList

ValidateBootstrapTokens validates a slice of BootstrapToken objects

func ValidateCertSANs ¶ added in v1.10.0

func ValidateCertSANs(altnames []string, fldPath *field.Path) field.ErrorList

ValidateCertSANs validates alternative names

func ValidateClusterConfiguration ¶ added in v1.12.0

func ValidateClusterConfiguration(c *kubeadm.ClusterConfiguration) field.ErrorList

ValidateClusterConfiguration validates an ClusterConfiguration object and collects all encountered errors

func ValidateDiscovery ¶

func ValidateDiscovery(d *kubeadm.Discovery, fldPath *field.Path) field.ErrorList

ValidateDiscovery validates discovery related configuration and collects all encountered errors

func ValidateDiscoveryBootstrapToken ¶ added in v1.13.0

func ValidateDiscoveryBootstrapToken(b *kubeadm.BootstrapTokenDiscovery, fldPath *field.Path) field.ErrorList

ValidateDiscoveryBootstrapToken validates bootstrap token discovery configuration

func ValidateDiscoveryFile ¶

func ValidateDiscoveryFile(f *kubeadm.FileDiscovery, fldPath *field.Path) field.ErrorList

ValidateDiscoveryFile validates file discovery configuration

func ValidateDiscoveryKubeConfigPath ¶ added in v1.13.0

func ValidateDiscoveryKubeConfigPath(discoveryFile string, fldPath *field.Path) field.ErrorList

ValidateDiscoveryKubeConfigPath validates location of a discovery file

func ValidateDiscoveryTokenAPIServer ¶ added in v1.13.0

func ValidateDiscoveryTokenAPIServer(apiServer string, fldPath *field.Path) field.ErrorList

ValidateDiscoveryTokenAPIServer validates discovery token for API server

func ValidateEtcd ¶ added in v1.11.0

func ValidateEtcd(e *kubeadm.Etcd, fldPath *field.Path) field.ErrorList

ValidateEtcd validates the .Etcd sub-struct.

func ValidateFeatureGates ¶ added in v1.8.0

func ValidateFeatureGates(featureGates map[string]bool, fldPath *field.Path) field.ErrorList

ValidateFeatureGates validates provided feature gates

func ValidateHostPort ¶ added in v1.12.0

func ValidateHostPort(endpoint string, fldPath *field.Path) field.ErrorList

ValidateHostPort validates host[:port] endpoints

func ValidateIPFromString ¶

func ValidateIPFromString(ipaddr string, fldPath *field.Path) field.ErrorList

ValidateIPFromString validates ip address

func ValidateIPNetFromString ¶

func ValidateIPNetFromString(subnetStr string, minAddrs int64, isDualStack bool, fldPath *field.Path) field.ErrorList

ValidateIPNetFromString validates network portion of ip address

func ValidateIgnorePreflightErrors ¶ added in v1.9.0

func ValidateIgnorePreflightErrors(ignorePreflightErrorsFromCLI, ignorePreflightErrorsFromConfigFile []string) (sets.String, error)

ValidateIgnorePreflightErrors validates duplicates in: - ignore-preflight-errors flag and - ignorePreflightErrors field in {Init,Join}Configuration files.

func ValidateInitConfiguration ¶ added in v1.12.0

func ValidateInitConfiguration(c *kubeadm.InitConfiguration) field.ErrorList

ValidateInitConfiguration validates an InitConfiguration object and collects all encountered errors

func ValidateJoinConfiguration ¶ added in v1.12.0

func ValidateJoinConfiguration(c *kubeadm.JoinConfiguration) field.ErrorList

ValidateJoinConfiguration validates node configuration and collects all encountered errors

func ValidateJoinControlPlane ¶ added in v1.13.0

func ValidateJoinControlPlane(c *kubeadm.JoinControlPlane, fldPath *field.Path) field.ErrorList

ValidateJoinControlPlane validates joining control plane configuration and collects all encountered errors

func ValidateMixedArguments ¶ added in v1.7.1

func ValidateMixedArguments(flag *pflag.FlagSet) error

ValidateMixedArguments validates passed arguments

func ValidateNetworking ¶

func ValidateNetworking(c *kubeadm.ClusterConfiguration, fldPath *field.Path) field.ErrorList

ValidateNetworking validates networking configuration

func ValidateNodeRegistrationOptions ¶ added in v1.11.0

func ValidateNodeRegistrationOptions(nro *kubeadm.NodeRegistrationOptions, fldPath *field.Path) field.ErrorList

ValidateNodeRegistrationOptions validates the NodeRegistrationOptions object

func ValidatePort ¶ added in v1.12.0

func ValidatePort(port int32, fldPath *field.Path) field.ErrorList

ValidatePort validates port numbers

func ValidateSocketPath ¶ added in v1.12.0

func ValidateSocketPath(socket string, fldPath *field.Path) field.ErrorList

ValidateSocketPath validates format of socket path or url

func ValidateToken ¶

func ValidateToken(token string, fldPath *field.Path) field.ErrorList

ValidateToken validates a Bootstrap Token

func ValidateTokenGroups ¶ added in v1.10.0

func ValidateTokenGroups(usages []string, groups []string, fldPath *field.Path) field.ErrorList

ValidateTokenGroups validates token groups

func ValidateTokenUsages ¶ added in v1.10.0

func ValidateTokenUsages(usages []string, fldPath *field.Path) field.ErrorList

ValidateTokenUsages validates token usages

func ValidateURLs ¶ added in v1.11.0

func ValidateURLs(urls []string, requireHTTPS bool, fldPath *field.Path) field.ErrorList

ValidateURLs validates the URLs given in the string slice, makes sure they are parsable. Optionally, it can enforces HTTPS usage.

Types ¶

This section is empty.

Source Files ¶

View all Source files

validation.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL