server

package

Go to main page

Versions in this module

v0

v0.33.1

Sep 22, 2026

v0.33.0

Sep 15, 2026

v0.32.5

Sep 22, 2026

v0.32.4

Sep 22, 2026

v0.32.3

Jul 2, 2026

v0.32.2

Jun 25, 2026

v0.32.1

Jun 23, 2026 GO-2026-6517

GO-2026-6517: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp

v0.32.0

Jun 15, 2026 GO-2026-6517

GO-2026-6517: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp

v0.31.6

Jul 6, 2026

v0.31.5

Jul 2, 2026

v0.31.4

Jun 25, 2026

v0.31.3

Jun 23, 2026 GO-2026-6517

GO-2026-6517: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp

v0.31.2

May 19, 2026 GO-2026-6517

GO-2026-6517: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp

v0.31.1

Apr 24, 2026 GO-2026-6517

GO-2026-6517: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp

v0.31.0

Apr 13, 2026 GO-2026-6517

GO-2026-6517: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp

Changes in this version

+ func Allow(sar authorizationv1.SubjectAccessReview) (authorizationv1.SubjectAccessReview, error)

+ func Deny(sar authorizationv1.SubjectAccessReview) (authorizationv1.SubjectAccessReview, error)

+ func NoOpinion(sar authorizationv1.SubjectAccessReview) (authorizationv1.SubjectAccessReview, error)

+ type AuthzHandler struct

+ func NewAuthzHandler(handler AuthzHandlerFunc) *AuthzHandler

+ func (h *AuthzHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

+ func (h *AuthzHandler) SetHandler(handler AuthzHandlerFunc)

+ type AuthzHandlerFunc func(authorizationv1.SubjectAccessReview) (authorizationv1.SubjectAccessReview, error)

+ type TLSServer struct

+ func NewTLSServer(port int, hostnames []string, pkiDirectory string, handler http.Handler) (*TLSServer, error)

+ func (s *TLSServer) CAFile() string

+ func (s *TLSServer) Start(ctx context.Context) error

+ func (s *TLSServer) Stop() error

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL