GO-2022-0792: Privilege Escalation in Kubernetes in github.com/kubernetes/kubernetes

token

package

v1.8.15-beta.0 Latest Latest Go to latest Published: Jun 18, 2018 License: Apache-2.0 Imports: 16 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/kubernetes/kubernetes

Documentation ¶

Index ¶

Constants
func RetrieveValidatedClusterInfo(discoveryToken string, tokenAPIServers, rootCAPubKeys []string) (*clientcmdapi.Cluster, error)

Constants ¶

View Source

const BootstrapUser = "token-bootstrap-client"

Variables ¶

This section is empty.

Functions ¶

func RetrieveValidatedClusterInfo ¶

func RetrieveValidatedClusterInfo(discoveryToken string, tokenAPIServers, rootCAPubKeys []string) (*clientcmdapi.Cluster, error)

RetrieveValidatedClusterInfo connects to the API Server and tries to fetch the cluster-info ConfigMap It then makes sure it can trust the API Server by looking at the JWS-signed tokens and (if rootCAPubKeys is not empty) validating the cluster CA against a set of pinned public keys

Types ¶

This section is empty.

Source Files ¶

View all Source files

token.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL