GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

health

package

v0.28.4 Latest Latest Go to latest Published: Feb 25, 2022 License: Apache-2.0 Imports: 11 Imported by: 12

Details

This section is empty.

This section is empty.

func HTTPProbe(config HTTPProbeConfigOptions) error

HTTPProbe checks that HTTP connection can be established to the address.

func ProbeHandler(prober func() bool, tracingEnabled bool) http.HandlerFunc

ProbeHandler returns a http.HandlerFunc that responds to health checks. This handler assumes the Knative Probe Header will be passed.

func TCPProbe(config TCPProbeConfigOptions) error

TCPProbe checks that a TCP socket to the address can be opened. Did not reuse k8s.io/kubernetes/pkg/probe/tcp to not create a dependency on klog.

type HTTPProbeConfigOptions struct {
	Timeout time.Duration
	*corev1.HTTPGetAction
	KubeMajor     string
	KubeMinor     string
	MaxProtoMajor int
}

HTTPProbeConfigOptions holds the HTTP probe config options

type TCPProbeConfigOptions struct {
	SocketTimeout time.Duration
	Address       string
}

TCPProbeConfigOptions holds the TCP probe config options