GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

config/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/knative/serving

Links

Open Source Insights

README ¶

Welcome to the knative/serving config directory!

The files in this directory are organized as follows:

core/: the elements that are required for knative/serving to function,
hpa-autoscaling/: the configuration needed to extend the core with HPA-class autoscaling,
namespace-wildcards/: the configuration needed to extend the core to provision wildcard certificates per-namespace,
cert-manager/: the configuration needed to plug in the cert-manager certificate implementation,
monitoring/: an installable bundle of tooling for assorted observability functions,
*.yaml: symlinks that form a particular "rendered view" of the knative/serving configuration.

Core

The Core is complex enough that it further breaks down as follows:

roles/: The [cluster] roles needed for the core controllers to function, or to plug knative/serving into standard Kubernetes RBAC constructs.
configmaps/: The configmaps that are used to configure the core components.
resources/: The serving resource definitions.
webhooks/: The serving {mutating, validating} admission webhook configurations, and supporting resources.
deployments/: The serving executable components and associated configuration resources.

Directories ¶

Path	Synopsis
core Package core is a placeholder that allows us to pull in config files via go mod vendor.	Package core is a placeholder that allows us to pull in config files via go mod vendor.
200-roles Package roles is a placeholder that allows us to pull in config files via go mod vendor.	Package roles is a placeholder that allows us to pull in config files via go mod vendor.
300-resources Package resources is a placeholder that allows us to pull in config files via go mod vendor.	Package resources is a placeholder that allows us to pull in config files via go mod vendor.
configmaps Package configmaps is a placeholder that allows us to pull in config files via go mod vendor.	Package configmaps is a placeholder that allows us to pull in config files via go mod vendor.
deployments Package deployments is a placeholder that allows us to pull in config files via go mod vendor.	Package deployments is a placeholder that allows us to pull in config files via go mod vendor.
webhooks Package webhooks is a placeholder that allows us to pull in config files via go mod vendor.	Package webhooks is a placeholder that allows us to pull in config files via go mod vendor.
hpa-autoscaling Package autoscaling is a placeholder that allows us to pull in config files via go mod vendor.	Package autoscaling is a placeholder that allows us to pull in config files via go mod vendor.
namespace-wildcard-certs Package certs is a placeholder that allows us to pull in config files via go mod vendor.	Package certs is a placeholder that allows us to pull in config files via go mod vendor.
post-install Package install is a placeholder that allows us to pull in config files via go mod vendor.	Package install is a placeholder that allows us to pull in config files via go mod vendor.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL