GO-2023-1793: secrets-store-csi-driver discloses service account tokens in logs in sigs.k8s.io/secrets-store-csi-driver

controllers

package

v1.2.4 Latest Latest Go to latest Published: Sep 7, 2022 License: Apache-2.0 Imports: 26 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/kubernetes-sigs/secrets-store-csi-driver

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
type SecretProviderClassPodStatusReconciler
- func New(mgr manager.Manager, nodeID string) (*SecretProviderClassPodStatusReconciler, error)

Constants ¶

View Source

const (
	SecretManagedLabel = "secrets-store.csi.k8s.io/managed"
	SecretUsedLabel    = "secrets-store.csi.k8s.io/used"

	SyncSecretForbiddenWarning = "" /* 132-byte string literal not displayed */
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type SecretProviderClassPodStatusReconciler ¶

type SecretProviderClassPodStatusReconciler struct {
	client.Client
	// contains filtered or unexported fields
}

SecretProviderClassPodStatusReconciler reconciles a SecretProviderClassPodStatus object

func New ¶ added in v0.0.15

func New(mgr manager.Manager, nodeID string) (*SecretProviderClassPodStatusReconciler, error)

New creates a new SecretProviderClassPodStatusReconciler

func (*SecretProviderClassPodStatusReconciler) ListOptionsLabelSelector ¶ added in v0.0.15

func (r *SecretProviderClassPodStatusReconciler) ListOptionsLabelSelector() client.ListOption

ListOptionsLabelSelector returns a ListOptions with a label selector for node name.

func (*SecretProviderClassPodStatusReconciler) Patcher ¶ added in v0.0.15

func (r *SecretProviderClassPodStatusReconciler) Patcher(ctx context.Context) error

func (*SecretProviderClassPodStatusReconciler) Reconcile ¶

func (r *SecretProviderClassPodStatusReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

func (*SecretProviderClassPodStatusReconciler) RunPatcher ¶ added in v0.0.15

func (r *SecretProviderClassPodStatusReconciler) RunPatcher(ctx context.Context)

func (*SecretProviderClassPodStatusReconciler) SetupWithManager ¶

func (r *SecretProviderClassPodStatusReconciler) SetupWithManager(mgr ctrl.Manager) error

Source Files ¶

View all Source files

secretproviderclasspodstatus_controller.go

Directories ¶

Path	Synopsis
syncsecret Package syncsecret holds the RBAC permission annotations for the controller to sync k8s secrets so that they can be built and applied separately.	Package syncsecret holds the RBAC permission annotations for the controller to sync k8s secrets so that they can be built and applied separately.
tokenrequest Package tokenrequest holds the RBAC permission annotations for the controller to create a serviceaccount token and pass it as part of Mount Request.	Package tokenrequest holds the RBAC permission annotations for the controller to create a serviceaccount token and pass it as part of Mount Request.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL