GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

apiexport

package

v0.7.2 Latest Latest Go to latest Published: Aug 10, 2022 License: Apache-2.0 Imports: 39 Imported by: 4

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kcp-dev/kcp

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func GenerateIdentitySecret(ns string, apiExportName string) (*corev1.Secret, error)
func IdentityHash(secret *corev1.Secret) (string, error)
func NewController(kcpClusterClient kcpclient.Interface, ...) (*controller, error)

Constants ¶

View Source

const (
	DefaultIdentitySecretNamespace = "kcp-system"
)

Variables ¶

This section is empty.

Functions ¶

func GenerateIdentitySecret ¶

func GenerateIdentitySecret(ns string, apiExportName string) (*corev1.Secret, error)

func IdentityHash ¶

func IdentityHash(secret *corev1.Secret) (string, error)

func NewController ¶

func NewController(
	kcpClusterClient kcpclient.Interface,
	apiExportInformer apisinformers.APIExportInformer,
	clusterWorkspaceShardInformer tenancyinformers.ClusterWorkspaceShardInformer,
	kubeClusterClient kubernetes.Interface,
	namespaceInformer coreinformers.NamespaceInformer,
	secretInformer coreinformers.SecretInformer,
) (*controller, error)

NewController returns a new controller for APIExports.

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL