GO-2026-5117: IPAM controller service account granted unnecessary full access to Secrets in github.com/metal3-io/ip-address-manager

ip-address-manager

command module

v0.0.5 Latest Latest Go to latest Published: Apr 16, 2021 License: Apache-2.0 Imports: 14 Imported by: 0

Details

This repository contains a controller to manage static IP address allocations in Cluster API Provider Metal3.

For more information about this controller and related repositories, see metal3.io.

IPAM version	CAPM3 version	Cluster API version
v1alpha1 (v0.1.X)	v1alpha4 (v0.4.X)	v1alpha3 (v0.3.X)

See metal3-dev-env for an end-to-end development and test environment for cluster-api-provider-metal3 and baremetal-operator.

See the API Documentation for details about the objects used with this controller. You can also see the cluster deployment workflow for the outline of the deployment process.

Deploys IPAM CRDs and deploys IPAM controllers

    make deploy

Runs CAPM3 controller locally

    kubectl scale -n capm3-system deployment.v1.apps/metal3-ipam-controller-manager \
      --replicas 0
    make run

    make deploy-examples

    make delete-examples

There is no documentation for this package.

Path	Synopsis
api module
v1alpha1 Package v1alpha1 contains API Schema definitions for the metal3 v1alpha1 API group +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:defaulter-gen=TypeMeta +kubebuilder:object:generate=true +groupName=ipam.metal3.io Package v1alpha1 contains API Schema definitions for the infrastructure v1alpha1 API group +kubebuilder:object:generate=true +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:defaulter-gen=TypeMeta +groupName=ipam.metal3.io	Package v1alpha1 contains API Schema definitions for the metal3 v1alpha1 API group +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:defaulter-gen=TypeMeta +kubebuilder:object:generate=true +groupName=ipam.metal3.io Package v1alpha1 contains API Schema definitions for the infrastructure v1alpha1 API group +kubebuilder:object:generate=true +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:defaulter-gen=TypeMeta +groupName=ipam.metal3.io
controllers
hack
boilerplate/test
ipam
mocks Package ipam_mocks is a generated GoMock package.	Package ipam_mocks is a generated GoMock package.
test module