Affected by GO-2024-3325 and 2 other vulnerabilities

GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

spec

package

v0.10.0 Latest Latest Go to latest Published: Dec 13, 2022 License: Apache-2.0 Imports: 43 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kcp-dev/kcp

Links

Open Source Insights

Documentation ¶

Index ¶

type Controller
- func NewSpecSyncer(syncerLogger logr.Logger, syncTargetWorkspace logicalcluster.Name, ...) (*Controller, error)
- func (c *Controller) AddToQueue(gvr schema.GroupVersionResource, obj interface{}, logger logr.Logger)
- func (c *Controller) Start(ctx context.Context, numThreads int)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Controller ¶

type Controller struct {
	// contains filtered or unexported fields
}

func NewSpecSyncer ¶

func NewSpecSyncer(syncerLogger logr.Logger, syncTargetWorkspace logicalcluster.Name, syncTargetName, syncTargetKey string,
	upstreamURL *url.URL, advancedSchedulingEnabled bool,
	upstreamClient kcpdynamic.ClusterInterface, downstreamClient dynamic.Interface, downstreamKubeClient kubernetes.Interface,
	upstreamInformers kcpdynamicinformer.DynamicSharedInformerFactory, downstreamInformers dynamicinformer.DynamicSharedInformerFactory, downstreamNSCleaner shared.Cleaner,
	syncerInformers resourcesync.SyncerInformerFactory,
	syncTargetUID types.UID,
	serviceAccountLister listerscorev1.ServiceAccountLister,
	roleLister listersrbacv1.RoleLister,
	roleBindingLister listersrbacv1.RoleBindingLister,
	deploymentLister listersappsv1.DeploymentLister,
	serviceLister listerscorev1.ServiceLister,
	endpointLister listerscorev1.EndpointsLister,
	dnsNamespace string,
	dnsImage string) (*Controller, error)

func (*Controller) AddToQueue ¶

func (c *Controller) AddToQueue(gvr schema.GroupVersionResource, obj interface{}, logger logr.Logger)

func (*Controller) Start ¶

func (c *Controller) Start(ctx context.Context, numThreads int)

Start starts N worker processes processing work items.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
dns
mutators

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL