Affected by GO-2024-3325 and 2 other vulnerabilities

GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

builder

package

v0.10.0 Latest Latest Go to latest Published: Dec 13, 2022 License: Apache-2.0 Imports: 34 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kcp-dev/kcp

Links

Open Source Insights

Documentation ¶

Index ¶

func BuildVirtualWorkspace(cfg *clientrest.Config, rootPathPrefix string, ...) framework.VirtualWorkspace
func CreateAndStartOrg(org logicalcluster.Name, rbacInformers kcprbacv1informers.ClusterInterface, ...) *authCacheClusterWorkspaces
func NewOrgListener(informer tenancyv1alpha1informers.ClusterWorkspaceClusterInformer, ...) *orgListener
type Stoppable

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func BuildVirtualWorkspace ¶

func BuildVirtualWorkspace(cfg *clientrest.Config, rootPathPrefix string, wildcardsClusterWorkspaces tenancyv1alpha1informers.ClusterWorkspaceClusterInformer, wildcardsRbacInformers kcprbacv1informers.ClusterInterface, kubeClusterClient kcpkubernetesclientset.ClusterInterface, kcpClusterClient kcpclientset.ClusterInterface, authorizationCacheResyncPeriod time.Duration, authorizationCacheResyncJitterFactor float64, authorizationCacheResyncSliding bool) framework.VirtualWorkspace

func CreateAndStartOrg ¶ added in v0.6.0

func CreateAndStartOrg(
	org logicalcluster.Name,
	rbacInformers kcprbacv1informers.ClusterInterface,
	clusterWorkspaceInformer tenancyv1alpha1informers.ClusterWorkspaceClusterInformer,
	initialWatchers []workspaceauth.CacheWatcher,
	period time.Duration, jitterFactor float64, sliding bool,
) *authCacheClusterWorkspaces

CreateAndStartOrg creates an Org that contains all the required clients and caches to retrieve user workspaces inside an org As part of an Org, a WorkspaceAuthCache is created and ensured to be started.

func NewOrgListener ¶ added in v0.6.0

func NewOrgListener(informer tenancyv1alpha1informers.ClusterWorkspaceClusterInformer, newClusterWorkspaces func(orgClusterName logicalcluster.Name, initialWatchers []authorization.CacheWatcher) registry.FilteredClusterWorkspaces) *orgListener

Types ¶

type Stoppable ¶ added in v0.6.0

type Stoppable interface {
	Stop()
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL