Affected by GO-2022-1000 and 2 other vulnerabilities

GO-2022-1000: KubeVirt vulnerable to arbitrary file read on host in kubevirt.io/kubevirt

GO-2024-2688: KubeVirt NULL pointer dereference flaw in kubevirt.io/kubevirt

GO-2024-2816: kubevirt allows a local attacker to execute arbitrary code via a crafted command in kubevirt.io/kubevirt

services

package

v0.40.0-rc.1 Latest Latest Go to latest Published: Apr 13, 2021 License: Apache-2.0 Imports: 26 Imported by: 11

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kubevirt/kubevirt

Documentation ¶

Index ¶

Constants
func CPUFeatureLabelsFromCPUFeatures(vmi *v1.VirtualMachineInstance) []string
func CPUModelLabelFromCPUModel(vmi *v1.VirtualMachineInstance) (label string, err error)
func HaveContainerDiskVolume(volumes []v1.Volume) bool
func HaveMasqueradeInterface(interfaces []v1.Interface) bool
func SetNodeAffinityForForbiddenFeaturePolicy(vmi *v1.VirtualMachineInstance, pod *k8sv1.Pod)
type PvcNotFoundError
type TemplateService
- func NewTemplateService(launcherImage string, virtShareDir string, virtLibDir string, ...) TemplateService

Constants ¶

View Source

const (
	CAP_NET_ADMIN    = "NET_ADMIN"
	CAP_NET_RAW      = "NET_RAW"
	CAP_SYS_ADMIN    = "SYS_ADMIN"
	CAP_SYS_NICE     = "SYS_NICE"
	CAP_SYS_RESOURCE = "SYS_RESOURCE"
)

View Source

const ENV_VAR_LIBVIRT_DEBUG_LOGS = "LIBVIRT_DEBUG_LOGS"

View Source

const ENV_VAR_VIRTIOFSD_DEBUG_LOGS = "VIRTIOFSD_DEBUG_LOGS"

View Source

const ENV_VAR_VIRT_LAUNCHER_LOG_VERBOSITY = "VIRT_LAUNCHER_LOG_VERBOSITY"

View Source

const EXT_LOG_VERBOSITY_THRESHOLD = 5

extensive log verbosity threshold after which libvirt debug logs will be enabled

View Source

const ISTIO_KUBEVIRT_ANNOTATION = "traffic.sidecar.istio.io/kubevirtInterfaces"

Istio list of virtual interfaces whose inbound traffic (from VM) will be treated as outbound traffic in envoy

View Source

const KvmDevice = "devices.kubevirt.io/kvm"

View Source

const LibvirtStartupDelay = 10

LibvirtStartupDelay is added to custom liveness and readiness probes initial delay value. Libvirt needs roughly 10 seconds to start.

View Source

const MULTUS_DEFAULT_NETWORK_CNI_ANNOTATION = "v1.multus-cni.io/default-network"

View Source

const MULTUS_RESOURCE_NAME_ANNOTATION = "k8s.v1.cni.cncf.io/resourceName"

View Source

const MultusNetworksAnnotation = "k8s.v1.cni.cncf.io/networks"

View Source

const NFD_CPU_FEATURE_PREFIX = "cpu-feature.node.kubevirt.io/"

View Source

const NFD_CPU_MODEL_PREFIX = "cpu-model.node.kubevirt.io/"

These perfixes for node feature discovery, are used in a NodeSelector on the pod to match a VirtualMachineInstance CPU model(Family) and/or features to nodes that support them.

View Source

const NFD_KVM_INFO_PREFIX = "hyperv.node.kubevirt.io/"

View Source

const TunDevice = "devices.kubevirt.io/tun"

View Source

const VhostNetDevice = "devices.kubevirt.io/vhost-net"

Variables ¶

This section is empty.

Functions ¶

func CPUFeatureLabelsFromCPUFeatures ¶ added in v0.15.0

func CPUFeatureLabelsFromCPUFeatures(vmi *v1.VirtualMachineInstance) []string

func CPUModelLabelFromCPUModel ¶ added in v0.11.1

func CPUModelLabelFromCPUModel(vmi *v1.VirtualMachineInstance) (label string, err error)

func HaveContainerDiskVolume ¶ added in v0.36.0

func HaveContainerDiskVolume(volumes []v1.Volume) bool

func HaveMasqueradeInterface ¶ added in v0.16.0

func HaveMasqueradeInterface(interfaces []v1.Interface) bool

func SetNodeAffinityForForbiddenFeaturePolicy ¶ added in v0.15.0

func SetNodeAffinityForForbiddenFeaturePolicy(vmi *v1.VirtualMachineInstance, pod *k8sv1.Pod)

Types ¶

type PvcNotFoundError ¶ added in v0.9.0

type PvcNotFoundError error

type TemplateService ¶

type TemplateService interface {
	RenderLaunchManifest(*v1.VirtualMachineInstance) (*k8sv1.Pod, error)
	RenderHotplugAttachmentPodTemplate(volume *v1.Volume, ownerPod *k8sv1.Pod, vmi *v1.VirtualMachineInstance, pvcName string, isBlock bool, tempPod bool) (*k8sv1.Pod, error)
	RenderLaunchManifestNoVm(*v1.VirtualMachineInstance) (*k8sv1.Pod, error)
	GetLauncherImage() string
}

func NewTemplateService ¶

func NewTemplateService(launcherImage string,
	virtShareDir string,
	virtLibDir string,
	ephemeralDiskDir string,
	containerDiskDir string,
	hotplugDiskDir string,
	imagePullSecret string,
	persistentVolumeClaimCache cache.Store,
	virtClient kubecli.KubevirtClient,
	clusterConfig *virtconfig.ClusterConfig,
	launcherSubGid int64) TemplateService

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL