GO-2025-3648: Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks in github.com/rancher/stev

watchlist

package

v0.9.17 Latest Latest Go to latest Published: Jun 19, 2026 License: Apache-2.0 Imports: 3 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/rancher/steve

Links

Documentation ¶

Overview ¶

Package watchlist decides whether Steve's informers use the client-go watch-list protocol (sendInitialEvents) or fall back to LIST+WATCH.

Constants ¶

This section is empty.

Variables ¶

View Source

var Whitelist = map[schema.GroupVersionKind]bool{
	{Group: "ext.cattle.io", Version: "v1", Kind: "Token"}:      true,
	{Group: "ext.cattle.io", Version: "v1", Kind: "Kubeconfig"}: true,
}

Whitelist holds aggregated (external) GVKs known to implement watch-list correctly, which may therefore keep watch-list enabled.

Functions ¶

func Disabled ¶

func Disabled(s *types.APISchema) bool

Disabled reports whether watch-list should be disabled for the schema's informer: true only for aggregated, non-whitelisted APIs (nil and built-in stay enabled, failing safe).

Types ¶

This section is empty.

Source Files ¶

View all Source files

policy.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL