Affected by GO-2022-0617 and 2 other vulnerabilities

GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

GO-2025-3465: Node Denial of Service via kubelet Checkpoint API in k8s.io/kubernetes

nodetaint

package

v1.27.10 Latest Latest Go to latest Published: Jan 17, 2024 License: Apache-2.0 Imports: 6 Imported by: 15

Details

View Source

const (
	// PluginName is the name of the plugin.
	PluginName = "TaintNodesByCondition"
)

This section is empty.

func Register(plugins *admission.Plugins)

Register registers a plugin

type Plugin struct {
	*admission.Handler
}

Plugin holds state for and implements the admission plugin.

func NewPlugin() *Plugin

NewPlugin creates a new NodeTaint admission plugin. This plugin identifies requests from nodes

func (p *Plugin) Admit(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) error

Admit is the main function that checks node identity and adds taints as needed.