authentication

Sep 8, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Sep 8, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Sep 2, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 31, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 19, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 19, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 18, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 16, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 15, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 10, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 10, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 10, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 9, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 5, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Aug 2, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jul 22, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jul 21, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jul 20, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Jul 18, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

+ type Authentication struct

+ ClientCert apiserveroptions.ClientCertAuthenticationOptions

+ DropGroups []string

+ PassOnGroups []string

+ func NewAuthentication() *Authentication

+ func (c *Authentication) AddFlags(fs *pflag.FlagSet)

+ func (c *Authentication) ApplyTo(authenticationInfo *genericapiserver.AuthenticationInfo, ...) error

+ func (c *Authentication) Validate() []error

+ type GroupFilter struct

+ Authenticator authenticator.Request

+ DropGroupPrefixes []string

+ DropGroups sets.String

+ PassOnGroupPrefixes []string

+ PassOnGroups sets.String

+ func (a *GroupFilter) AuthenticateRequest(req *http.Request) (*authenticator.Response, bool, error)

Jul 14, 2022 GO-2024-3325 +2 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

  GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp