Affected by GO-2024-3325 and 2 other vulnerabilities

GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

internalapis

package

v0.22.0 Latest Latest Go to latest Published: Jan 25, 2024 License: Apache-2.0 Imports: 14 Imported by: 2

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kcp-dev/kcp

Links

Open Source Insights

Documentation ¶

Index ¶

func CreateAPIResourceSchemas(schemes []*runtime.Scheme, ...) (map[apisv1alpha1.GroupResource]*apisv1alpha1.APIResourceSchema, error)
type InternalAPI

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func CreateAPIResourceSchemas ¶ added in v0.7.1

func CreateAPIResourceSchemas(schemes []*runtime.Scheme, openAPIDefinitionsGetters []common.GetOpenAPIDefinitions, defs ...InternalAPI) (map[apisv1alpha1.GroupResource]*apisv1alpha1.APIResourceSchema, error)

Types ¶

type InternalAPI ¶

type InternalAPI struct {
	Names         apiextensionsv1.CustomResourceDefinitionNames
	GroupVersion  schema.GroupVersion
	Instance      runtime.Object
	ResourceScope apiextensionsv1.ResourceScope
	HasStatus     bool
}

InternalAPI describes an API to be imported from some schemes and generated OpenAPI V2 definitions.

Source Files ¶

View all Source files

import.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL