GO-2026-6517: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp

options

package

v0.30.3 Latest Latest Go to latest Published: Apr 1, 2026 License: Apache-2.0 Imports: 6 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kcp-dev/kcp

Links

Documentation ¶

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Cache ¶

type Cache struct {
	KubeconfigFile string
}

func NewCache ¶

func NewCache() *Cache

func (*Cache) AddFlags ¶

func (o *Cache) AddFlags(flags *pflag.FlagSet)

func (*Cache) RestConfig ¶

func (o *Cache) RestConfig(fallback *rest.Config) (*rest.Config, error)

func (*Cache) Validate ¶

func (o *Cache) Validate() []error

Source Files ¶

View all Source files

cache.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL