server

Jul 25, 2025

Changes in this version

+ type CRConverterFactory struct

+ func NewCRConverterFactory(serviceResolver webhook.ServiceResolver, ...) (*CRConverterFactory, error)

+ func (f *CRConverterFactory) NewConverter(crd *apiextensionsv1.CustomResourceDefinition) (conversion.CRConverter, error)

type ExtraConfig

+ CacheDiscoveringDynamicSharedInformerFactory *informer.DiscoveringDynamicSharedInformerFactory

+ KcpCacheClusterClient kcpclientset.ClusterInterface

type Server

+ DynRESTMapper *dynamicrestmapper.DynamicRESTMapper

Mar 18, 2025

Changes in this version

+ func NewLocalProxyHandler(defaultHandler http.Handler, index index.Index, additionalMappingsFile string) (http.Handler, error)

Mar 18, 2025 GO-2025-3538

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Dec 11, 2024 GO-2025-3538

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

+ func WithImpersonationGatekeeper(handler http.Handler) http.Handler

Oct 6, 2024 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Sep 23, 2024 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Aug 26, 2024 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Apr 22, 2024 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Mar 8, 2024 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Jan 25, 2024 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Oct 19, 2023 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

+ type RunFunc func(ctx context.Context)

type Server

+ ApiExtensions *extensionsapiserver.CustomResourceDefinitions

+ Apis *controlplaneapiserver.Server

+ MiniAggregator *miniaggregator.MiniAggregatorServer

+ type WaitFunc func(ctx context.Context, s *Server) error

Jun 20, 2023 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

+ type CompletedVirtualConfig struct

+ func (c CompletedVirtualConfig) NewServer(preHandlerChainMux mux) (*virtualrootapiserver.Server, error)

type Config

+ OptionalVirtual *VirtualConfig

type ExtraConfig

+ ExternalLogicalClusterAdminConfig *rest.Config

+ type VirtualConfig virtualrootapiserver.Config

+ func (c *VirtualConfig) Complete(auth genericapiserver.AuthenticationInfo, ...) CompletedVirtualConfig

Feb 22, 2023 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

+ const KcpBootstrapperUserName

+ var SystemCRDClusterName = logicalcluster.Name("system:system-crds")

+ func WithLocalProxy(handler http.Handler, shardName, shardBaseURL string, ...) http.Handler

+ func WithVirtualWorkspacesProxy(apiHandler http.Handler, shardVirtualWorkspaceURL *url.URL, ...) http.HandlerFunc

type ExtraConfig

+ CacheKubeSharedInformerFactory kcpkubernetesinformers.SharedInformerFactory

+ DiscoveringDynamicSharedInformerFactory *informer.DiscoveringDynamicSharedInformerFactory

+ IdentityConfig *rest.Config

+ LogicalClusterAdminConfig *rest.Config

type Server

+ func (s *Server) WaitForPhase1Finished()

+ func (s *Server) WaitForSync(stop <-chan struct{}) error

Feb 13, 2023 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Feb 10, 2023 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Dec 13, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

type ExtraConfig

+ CacheDynamicClient kcpdynamic.ClusterInterface

+ CacheKcpSharedInformerFactory kcpinformers.SharedInformerFactory

+ ShardBaseURL func() string

+ ShardExternalURL func() string

+ ShardVirtualWorkspaceURL func() string

Oct 11, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Oct 5, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

+ func WithRequestIdentity(handler http.Handler) http.Handler

type ExtraConfig

+ BootstrapApiExtensionsClusterClient apiextensionsclient.ClusterInterface

+ BootstrapDynamicClusterClient dynamic.ClusterInterface

+ BootstrapKcpClusterClient kcpclient.ClusterInterface

Sep 8, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Sep 8, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Sep 2, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

type ExtraConfig

+ DeepSARClient kubernetesclient.ClusterInterface

Aug 31, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Aug 19, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Aug 19, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Aug 18, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Aug 16, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Aug 15, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Aug 10, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Aug 10, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Aug 10, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Aug 9, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Aug 5, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

+ type CompletedConfig struct

+ type Config struct

+ ApiExtensions *apiextensionsapiserver.Config

+ Apis *apis.Config

+ EmbeddedEtcd *embeddedetcd.Config

+ GenericConfig *genericapiserver.Config

+ MiniAggregator *aggregator.MiniAggregatorConfig

+ Options *kcpserveroptions.CompletedOptions

+ func NewConfig(opts *kcpserveroptions.CompletedOptions) (*Config, error)

+ func (c *Config) Complete() (CompletedConfig, error)

+ type ExtraConfig struct

+ ApiExtensionsClusterClient apiextensionsclient.ClusterInterface

+ ApiExtensionsSharedInformerFactory apiextensionsexternalversions.SharedInformerFactory

+ DynamicClusterClient dynamic.ClusterInterface

+ DynamicDiscoverySharedInformerFactory *informer.DynamicDiscoverySharedInformerFactory

+ KcpClusterClient kcpclient.ClusterInterface

+ KcpSharedInformerFactory kcpexternalversions.SharedInformerFactory

+ KubeClusterClient kubernetes.ClusterInterface

+ KubeSharedInformerFactory coreexternalversions.SharedInformerFactory

+ RootShardKcpClusterClient kcpclient.ClusterInterface

+ TemporaryRootShardKcpSharedInformerFactory kcpexternalversions.SharedInformerFactory

Aug 2, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Jul 22, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Jul 21, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Jul 20, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Jul 18, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

+ const HomeBucketClusterWorkspaceType

+ const HomeClusterWorkspaceType

+ var SystemCRDLogicalCluster = logicalcluster.New("system:system-crds")

+ func IdentityFromContext(ctx context.Context) string

+ func NewTableConverterProvider() *tableConverterProvider

+ func UserAgentFrom(ctx context.Context) string

+ func WithAcceptHeader(apiHandler http.Handler) http.Handler

+ func WithAuditAnnotation(handler http.Handler) http.HandlerFunc

+ func WithClusterAnnotation(handler http.Handler) http.HandlerFunc

+ func WithHomeWorkspaces(apiHandler http.Handler, a authorizer.Authorizer, ...) http.Handler

+ func WithIdentity(ctx context.Context, identity string) context.Context

+ func WithInClusterServiceAccountRequestRewrite(handler http.Handler) http.Handler

+ func WithUserAgent(handler http.Handler) http.Handler

+ func WithWildcardIdentity(handler http.Handler) http.Handler

+ func WithWorkspaceProjection(apiHandler http.Handler) http.HandlerFunc

+ type TableConverterFunc func(ctx context.Context, object runtime.Object, tableOptions runtime.Object) (*metav1.Table, error)

+ func (tcf TableConverterFunc) ConvertToTable(ctx context.Context, object runtime.Object, tableOptions runtime.Object) (*metav1.Table, error)

Jul 14, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Jun 1, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Jun 1, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

May 3, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Apr 1, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Mar 28, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Mar 15, 2022 GO-2024-3325 +1 more

  GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

  GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

Changes in this version

+ func WithClusterScope(apiHandler http.Handler) http.HandlerFunc

+ func WithWildcardListWatchGuard(apiHandler http.Handler) http.HandlerFunc

+ type Server struct

+ func NewServer(o *kcpserveroptions.CompletedOptions) (*Server, error)

+ func (s *Server) AddPostStartHook(name string, hook genericapiserver.PostStartHookFunc)

+ func (s *Server) AddPreShutdownHook(name string, hook genericapiserver.PreShutdownHookFunc)

+ func (s *Server) Run(ctx context.Context) error