Affected by GO-2022-0617
and 11 other vulnerabilities
GO-2022-0617 : WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes
GO-2022-0908 : Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes
GO-2022-0910 : Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes
GO-2022-0983 : kubectl ANSI escape characters not filtered in k8s.io/kubernetes
GO-2023-1864 : Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes
GO-2023-1891 : kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes
GO-2023-1892 : Kubernetes mountable secrets policy bypass in k8s.io/kubernetes
GO-2023-2159 : Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes
GO-2023-2170 : Kubernetes privilege escalation vulnerability in k8s.io/kubernetes
GO-2023-2330 : Kubernetes privilege escalation vulnerability in k8s.io/kubernetes
GO-2023-2341 : Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes
GO-2024-2994 : Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
Discover Packages
k8s.io/kubernetes
pkg
controller
certificates
rootcacertpublisher
package
Version:
v1.20.6
Opens a new window with list of versions in this module.
Published: Apr 15, 2021
License: Apache-2.0
Opens a new window with license information.
Imports: 16
Opens a new window with list of imports.
Imported by: 14
Opens a new window with list of known importers.
Documentation
Documentation
¶
View Source
const RootCACertConfigMapName = "kube-root-ca.crt"
RootCACertConfigMapName is name of the configmap which stores certificates
to access api-server
type Publisher struct {
}
Publisher manages certificate ConfigMap objects inside Namespaces
NewPublisher construct a new controller which would manage the configmap
which stores certificates in each namespace. It will make sure certificate
configmap exists in each namespace.
func (c *Publisher ) Run(workers int , stopCh <-chan struct{})
Run starts process
Source Files
¶
Click to show internal directories.
Click to hide internal directories.