Affected by GO-2024-3325 and 2 other vulnerabilities

GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

validatingwebhook

package

v0.25.0 Latest Latest Go to latest Published: Aug 26, 2024 License: Apache-2.0 Imports: 20 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kcp-dev/kcp

Links

Documentation ¶

Index ¶

Constants
func Register(plugins *admission.Plugins)
func SetClusterAnnotation(obj metav1.Object, clusterName logicalcluster.Name) (undoFn func())
type Plugin
- func NewValidatingAdmissionWebhook(configFile io.Reader) (*Plugin, error)

Constants ¶

View Source

const (
	PluginName = "apis.kcp.io/ValidatingWebhook"
)

Variables ¶

This section is empty.

Functions ¶

func Register ¶

func Register(plugins *admission.Plugins)

func SetClusterAnnotation ¶ added in v0.25.0

func SetClusterAnnotation(obj metav1.Object, clusterName logicalcluster.Name) (undoFn func())

SetClusterAnnotation sets the cluster annotation on the given object to the given clusterName, returning an undo function that can be used to revert the change.

Types ¶

type Plugin ¶

type Plugin struct {
	*admission.Handler
	// contains filtered or unexported fields
}

func NewValidatingAdmissionWebhook ¶

func NewValidatingAdmissionWebhook(configFile io.Reader) (*Plugin, error)

func (*Plugin) SetKcpInformers ¶ added in v0.20.0

func (p *Plugin) SetKcpInformers(local, global kcpinformers.SharedInformerFactory)

func (*Plugin) SetKubeClusterClient ¶ added in v0.20.0

func (p *Plugin) SetKubeClusterClient(client kcpkubernetesclientset.ClusterInterface)

func (*Plugin) SetKubeInformers ¶ added in v0.11.0

func (p *Plugin) SetKubeInformers(local, global kcpkubernetesinformers.SharedInformerFactory)

func (*Plugin) Validate ¶

func (p *Plugin) Validate(ctx context.Context, attr admission.Attributes, o admission.ObjectInterfaces) error

func (*Plugin) ValidateInitialization ¶ added in v0.20.0

func (p *Plugin) ValidateInitialization() error

Source Files ¶

View all Source files

plugin.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL