Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

kustomize: introduce secure FS implementation #262

Merged
merged 1 commit into from
Apr 15, 2022
Merged

kustomize: introduce secure FS implementation #262

merged 1 commit into from
Apr 15, 2022

Commits on Apr 15, 2022

  1. kustomize: introduce secure FS implementation 

    This implementation functions as a drop-in replacement for Kustomize's
own `fsOnDisk`, and asserts any path it handles to be inside root.

In essence, the whole file system is now restricted like
loader.RestrictionRootOnly would, but while allowing root to differ
from the top Kustomization directory.

The main reason to put the constraint in the file system implementation
is because the current Krusty API does not allow to configure a custom
load restrictor, but does allow injecting a custom FS.

Signed-off-by: Hidde Beydals <hello@hidde.co>
    @hiddeco
    hiddeco committed Apr 15, 2022
    Configuration menu
    Copy the full SHA
    0ec014b View commit details
    Browse the repository at this point in the history