Affected by GO-2024-3325 and 2 other vulnerabilities

GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

pkg/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kcp-dev/kcp

Links

Open Source Insights

Directories ¶

Path	Synopsis
admission
initializers
apis module
apiresource
apiresource/v1alpha1 +k8s:deepcopy-gen=package,register +groupName=apiresource.kcp.dev	+k8s:deepcopy-gen=package,register +groupName=apiresource.kcp.dev
cluster
cluster/v1alpha1 +k8s:deepcopy-gen=package,register +groupName=cluster.example.dev	+k8s:deepcopy-gen=package,register +groupName=cluster.example.dev
tenancy
tenancy/v1alpha1 +k8s:deepcopy-gen=package,register +groupName=tenancy.kcp.dev +k8s:openapi-gen=true	+k8s:deepcopy-gen=package,register +groupName=tenancy.kcp.dev +k8s:openapi-gen=true
tenancy/v1alpha1/helper
authorization
bootstrap
client module
clientset/versioned This package has the automatically generated clientset.	This package has the automatically generated clientset.
clientset/versioned/fake This package has the automatically generated fake clientset.	This package has the automatically generated fake clientset.
clientset/versioned/scheme This package contains the scheme of the automatically generated clientset.	This package contains the scheme of the automatically generated clientset.
clientset/versioned/typed/apiresource/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/apiresource/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/cluster/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/cluster/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/tenancy/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/tenancy/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
informers/externalversions
informers/externalversions/apiresource
informers/externalversions/apiresource/v1alpha1
informers/externalversions/cluster
informers/externalversions/cluster/v1alpha1
informers/externalversions/internalinterfaces
informers/externalversions/tenancy
informers/externalversions/tenancy/v1alpha1
listers/apiresource/v1alpha1
listers/cluster/v1alpha1
listers/tenancy/v1alpha1
cliplugins
workspace/cmd
workspace/plugin
cmd
help
crdpuller crdpuller package provides a library to pull API resource definitions from existing Kubernetes clusters as Custom Resource Definitions that can then be applied to a KCP instance.	crdpuller package provides a library to pull API resource definitions from existing Kubernetes clusters as Custom Resource Definitions that can then be applied to a KCP instance.
etcd
gvk
informer
localenvoy
controllers/ingress
controlplane
openapi
reconciler
apiresource
cluster
cluster/apiimporter
cluster/syncer
deployment
ingresssplitter
namespace
workspace
workspaceindex
workspaceshard
schemacompat
server
options
sharding
apiserver
syncer
virtual
framework Package framework provides a the required interfaces, structs and generic implementation that allow creating KCP virtual workspaces with a minimal amount of work.	Package framework provides a the required interfaces, structs and generic implementation that allow creating KCP virtual workspaces with a minimal amount of work.
framework/cmd
framework/context
framework/fixedgvs Package fixedgvs provides the types (and underlying implementation) required to build virtual workspaces which allow adding well-defined APIs in a limited number of group/versions, implemented as Rest storages.	Package fixedgvs provides the types (and underlying implementation) required to build virtual workspaces which allow adding well-defined APIs in a limited number of group/versions, implemented as Rest storages.
framework/fixedgvs/apiserver
framework/rbac
framework/rootapiserver
workspaces/auth Package auth provides mechanisms for enforcing authorization to Workspace resources in KCP This package is largely insired from openshift/openshift-apiserver/pkg/project/auth https://github.com/openshift/openshift-apiserver/blob/9271466bfd02a9eb02fb5a43c8b9ff1ced76aca9/pkg/project/auth	Package auth provides mechanisms for enforcing authorization to Workspace resources in KCP This package is largely insired from openshift/openshift-apiserver/pkg/project/auth https://github.com/openshift/openshift-apiserver/blob/9271466bfd02a9eb02fb5a43c8b9ff1ced76aca9/pkg/project/auth
workspaces/builder
workspaces/cache
workspaces/cmd
workspaces/printers
workspaces/registry
workspaces/util

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL