validatingwebhook

Sep 25, 2025 GO-2025-3985

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 22, 2025 GO-2025-3985

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jul 25, 2025 GO-2025-3985

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Mar 27, 2025 GO-2025-3985

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Mar 18, 2025 GO-2025-3985

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Mar 11, 2025 GO-2025-3985

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Feb 24, 2025 GO-2025-3985

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Mar 18, 2025 GO-2025-3985

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Mar 18, 2025 GO-2025-3538 +1 more

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Dec 11, 2024 GO-2025-3538 +1 more

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Oct 6, 2024 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Sep 23, 2024 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 26, 2024 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

+ func SetClusterAnnotation(obj metav1.Object, clusterName logicalcluster.Name) (undoFn func())

Apr 22, 2024 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Mar 8, 2024 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jan 25, 2024 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Oct 19, 2023 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jun 20, 2023 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

type Plugin

+ func (p *Plugin) SetKcpInformers(local, global kcpinformers.SharedInformerFactory)

+ func (p *Plugin) SetKubeClusterClient(client kcpkubernetesclientset.ClusterInterface)

+ func (p *Plugin) ValidateInitialization() error

Feb 22, 2023 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

type Plugin

+ func (p *Plugin) SetKubeInformers(local, global kcpkubernetesinformers.SharedInformerFactory)

Feb 13, 2023 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Feb 10, 2023 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Dec 13, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Oct 11, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Oct 5, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Sep 8, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Sep 8, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Sep 2, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 31, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 19, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 19, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 18, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 16, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 15, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 10, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 10, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 10, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 9, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 5, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 2, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jul 22, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jul 21, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jul 20, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jul 18, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

+ const PluginName

+ func Register(plugins *admission.Plugins)

+ type Plugin struct

+ func NewValidatingAdmissionWebhook(configfile io.Reader) (*Plugin, error)

+ func (a *Plugin) Validate(ctx context.Context, attr admission.Attributes, o admission.ObjectInterfaces) error

+ func (p *Plugin) SetExternalKubeInformerFactory(f informers.SharedInformerFactory)

Jul 14, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jun 1, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jun 1, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

May 3, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp