Remove gitRepo volume type #125983
Description
Metadata
Metadata
Assignees
Labels
Categorizes issue or PR as related to a new feature.Indicates an issue or PR lacks a `triage/foo` label and requires one.Highest priority. Must be actively worked on as someone's top priority right now.Categorizes an issue or PR as relevant to SIG Security.Categorizes an issue or PR as relevant to SIG Storage.
Type
Fields
Give feedbackNo fields configured for issues without a type.
What would you like to be added?
I'd like to remove gitRepo volume types. It's been deprecated for 6 years now and if a giant foot gun.
In a recent blog a researcher has exploited it to get remote code execution(RCE).
https://irsl.medium.com/sneaky-write-hook-git-clone-to-root-on-k8s-node-e38236205d54
Why is this needed?
To prevent folks from using a deprecated and dangerous volume type.