Affected by GO-2022-1000 and 2 other vulnerabilities

GO-2022-1000: KubeVirt vulnerable to arbitrary file read on host in kubevirt.io/kubevirt

GO-2024-2688: KubeVirt NULL pointer dereference flaw in kubevirt.io/kubevirt

GO-2024-2816: kubevirt allows a local attacker to execute arbitrary code via a crafted command in kubevirt.io/kubevirt

webhooks

package

v0.43.1-rc.1 Latest Latest Go to latest Published: Jul 21, 2021 License: Apache-2.0 Imports: 20 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

func GetAdmissionReview(r *http.Request) (*admissionv1.AdmissionReview, error)

GetAdmissionReview

func GetVMFromAdmissionReview(ar *admissionv1.AdmissionReview) (new *v12.VirtualMachine, old *v12.VirtualMachine, err error)

func GetVMIFromAdmissionReview(ar *admissionv1.AdmissionReview) (new *v12.VirtualMachineInstance, old *v12.VirtualMachineInstance, err error)

func SetupPromTLS(certManager certificate.Manager) *tls.Config

func SetupTLSForVirtHandlerClients(caManager ClientCAManager, certManager certificate.Manager, externallyManaged bool) *tls.Config

func SetupTLSForVirtHandlerServer(caManager ClientCAManager, certManager certificate.Manager, externallyManaged bool) *tls.Config

func SetupTLSWithCertManager(caManager ClientCAManager, certManager certificate.Manager, clientAuth tls.ClientAuthType) *tls.Config

func ToAdmissionResponse(causes []v1.StatusCause) *admissionv1.AdmissionResponse

func ToAdmissionResponseError(err error) *admissionv1.AdmissionResponse

ToAdmissionResponseError

func ValidateRequestResource(request v1.GroupVersionResource, group string, resource string) bool

func ValidateSchema(gvk schema.GroupVersionKind, data []byte) *admissionv1.AdmissionResponse

func ValidateStatus(data []byte) *admissionv1.AdmissionResponse

func ValidationErrorsToAdmissionResponse(errs []error) *admissionv1.AdmissionResponse

type ClientCAManager interface {
	GetCurrent() (*x509.CertPool, error)
}

func NewCAManager(configMapCache cache.Store, namespace string, configMapName string) ClientCAManager

func NewKubernetesClientCAManager(configMapCache cache.Store) ClientCAManager

Path	Synopsis
validating-webhooks