Affected by GO-2024-3325 and 2 other vulnerabilities

GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

validatingwebhook

package

v0.11.0 Latest Latest Go to latest Published: Feb 22, 2023 License: Apache-2.0 Imports: 16 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kcp-dev/kcp

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func Register(plugins *admission.Plugins)
type Plugin
- func NewValidatingAdmissionWebhook(configfile io.Reader) (*Plugin, error)

Constants ¶

View Source

const (
	PluginName = "apis.kcp.io/ValidatingWebhook"
)

Variables ¶

This section is empty.

Functions ¶

func Register ¶

func Register(plugins *admission.Plugins)

Types ¶

type Plugin ¶

type Plugin struct {
	// Using validating plugin, for the dispatcher to use.
	// This plugins admit function will never be called.
	validating.Plugin
	*webhook.WebhookDispatcher
}

func NewValidatingAdmissionWebhook ¶

func NewValidatingAdmissionWebhook(configfile io.Reader) (*Plugin, error)

func (*Plugin) SetExternalKubeInformerFactory ¶

func (p *Plugin) SetExternalKubeInformerFactory(f kubernetesinformers.SharedInformerFactory)

SetExternalKubeInformerFactory implements the WantsExternalKubeInformerFactory interface.

func (*Plugin) SetKubeInformers ¶ added in v0.11.0

func (p *Plugin) SetKubeInformers(local, global kcpkubernetesinformers.SharedInformerFactory)

func (*Plugin) Validate ¶

func (p *Plugin) Validate(ctx context.Context, attr admission.Attributes, o admission.ObjectInterfaces) error

Source Files ¶

View all Source files

plugin.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL