Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
github.com/doodlescheduling/k8skafka-controller
Kubernetes controller that can manage Kafka Topics.
Controller assumes you already have a working Kafka installation. How Kafka brokers are actually managed is outside of the scope of this project for the moment.
A KafkaTopic
represents one Kafka Topic.
apiVersion: kafka.infra.doodle.com/v1beta1
kind: KafkaTopic
metadata:
name: test-topic
spec:
address: "kafka:9092"
name: "test-topic"
partitions: 16
replicationFactor: 1
config:
cleanupPolicy: compact
deleteRetentionsMs: 31556952000
Please see chart/k8skafka-controller for the helm chart docs.
You may change base settings for the controller using env variables (or alternatively command line arguments). Available env variables:
Name | Description | Default |
---|---|---|
METRICS_ADDR | The address of the metric endpoint binds to. | :9556 |
PROBE_ADDR | The address of the probe endpoints binds to. | :9557 |
ENABLE_LEADER_ELECTION | Enable leader election for controller manager. | false |
LEADER_ELECTION_NAMESPACE | Change the leader election namespace. This is by default the same where the controller is deployed. | `` |
NAMESPACES | The controller listens by default for all namespaces. This may be limited to a comma delimited list of dedicated namespaces. | `` |
CONCURRENT | The number of concurrent reconcile workers. | 4 |
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.