containerd

0 Fork 0

mirror of https://github.com/containerd/containerd.git synced 2026-11-06 13:27:16 +00:00

Files

T

Aadhar Agarwal 868869eb9e fix: sanitize error before gRPC return to prevent credential leak in pod events

PR #12491 fixed credential leaks in containerd logs but the gRPC error
returned to kubelet still contained sensitive information. This was
visible in Kubernetes pod events via `kubectl describe pod`.

The issue was that SanitizeError was called inside the defer block,
but errgrpc.ToGRPC(err) was evaluated before the defer ran, so the
gRPC message contained the original unsanitized error.

Move SanitizeError before the return statement so both the logged
error and the gRPC error are sanitized.

Ref: #5453
Signed-off-by: Aadhar Agarwal <aadagarwal@microsoft.com>

2026-04-07 17:11:18 -07:00

cleanup

ignore the static check when using anonymous struct in testing

2024-08-14 14:50:39 +05:30

cri

fix: sanitize error before gRPC return to prevent credential leak in pod events

2026-04-07 17:11:18 -07:00

eventq

Add support for multiple subscribers to CRI container events

2024-01-19 21:27:06 -08:00

failpoint

Move pkg/failpoint to internal/failpoint