Download Latest Version apigen_0.27.1_darwin_amd64.tar.gz (30.5 MB)
Email in envelope

Get an email when there's a new version of kcp Kubernetes

Home / v0.27.0
Name Modified Size InfoDownloads / Week
Parent folder
kcp_0.27.0_checksums.txt 2025-03-18 2.9 kB
0
kubectl-create-workspace-plugin_0.27.0_linux_amd64.tar.gz 2025-03-18 25.7 MB
0
kubectl-create-workspace-plugin_0.27.0_linux_arm64.tar.gz 2025-03-18 24.0 MB
0
kubectl-create-workspace-plugin_0.27.0_windows_amd64.tar.gz 2025-03-18 26.1 MB
0
kubectl-create-workspace-plugin_0.27.0_darwin_amd64.tar.gz 2025-03-18 25.7 MB
0
kubectl-create-workspace-plugin_0.27.0_darwin_arm64.tar.gz 2025-03-18 24.4 MB
0
kubectl-create-workspace-plugin_0.27.0_windows_arm64.tar.gz 2025-03-18 24.1 MB
0
kubectl-ws-plugin_0.27.0_darwin_amd64.tar.gz 2025-03-18 25.7 MB
0
kubectl-ws-plugin_0.27.0_darwin_arm64.tar.gz 2025-03-18 24.4 MB
0
kubectl-ws-plugin_0.27.0_linux_amd64.tar.gz 2025-03-18 25.7 MB
0
kubectl-ws-plugin_0.27.0_linux_arm64.tar.gz 2025-03-18 24.0 MB
0
kubectl-kcp-plugin_0.27.0_linux_amd64.tar.gz 2025-03-18 25.8 MB
0
kubectl-kcp-plugin_0.27.0_linux_arm64.tar.gz 2025-03-18 24.0 MB
0
kubectl-ws-plugin_0.27.0_windows_amd64.tar.gz 2025-03-18 26.1 MB
0
kubectl-ws-plugin_0.27.0_windows_arm64.tar.gz 2025-03-18 24.1 MB
0
kubectl-kcp-plugin_0.27.0_darwin_amd64.tar.gz 2025-03-18 25.8 MB
0
kubectl-kcp-plugin_0.27.0_darwin_arm64.tar.gz 2025-03-18 24.5 MB
0
kubectl-kcp-plugin_0.27.0_windows_amd64.tar.gz 2025-03-18 26.2 MB
0
kubectl-kcp-plugin_0.27.0_windows_arm64.tar.gz 2025-03-18 24.2 MB
0
apigen_0.27.0_darwin_amd64.tar.gz 2025-03-18 30.5 MB
0
apigen_0.27.0_linux_arm64.tar.gz 2025-03-18 28.4 MB
0
apigen_0.27.0_darwin_arm64.tar.gz 2025-03-18 29.0 MB
0
apigen_0.27.0_linux_amd64.tar.gz 2025-03-18 30.5 MB
0
kcp_0.27.0_darwin_amd64.tar.gz 2025-03-18 62.1 MB
0
kcp_0.27.0_darwin_arm64.tar.gz 2025-03-18 60.0 MB
0
kcp_0.27.0_linux_amd64.tar.gz 2025-03-18 61.7 MB
0
kcp_0.27.0_linux_arm64.tar.gz 2025-03-18 58.4 MB
0
README.md 2025-03-18 11.8 kB
0
v0.27.0 source code.tar.gz 2025-03-18 4.5 MB
0
v0.27.0 source code.zip 2025-03-18 5.5 MB
0
Totals: 30 Items   820.8 MB 0

Changes by Kind

Breaking Change

  • Release artifacts for ppc64le are no longer published (#3211, @embik)

Security

  • Fix impersonation for non-system users (GHSA-c7xh-gjv4-4jgv) (#3206, @mjudeikis)
  • Add additional authorizer to APIExport Virtual Workspace that queries APIBinding for authorization decisions (GHSA-w2rr-38wv-8rrp) (#3338, @embik)

API Change

  • Expose the kcp e2e test framework through the SDK. (#3327, @sttts)
  • Updated dependencies to be in line with Kubernetes v1.31.6 (#3307, @gman0)

Feature

  • Pass through original identity of controllers accessing a logical cluster through the APIExport virtual workspace. To get the required permissions, a warrant mechanism is added through user extra fields that attaches secondary user identities purely used for authorization. (#3156, @sttts)
  • Make APIExportEndpointSlices consumer aware (#3256, @mjudeikis)
  • Add workspace phase reporter reconciler (#3183, @mjudeikis)
  • Add the Unavailable phase to the API (#3183, @mjudeikis)
  • Implement exclusion of Unavailable workspaces from serving via proxy to avoid serving something which is not supposed to be served. (#3183, @mjudeikis)
  • Add OpenAPI v3 schema support to the Virtual Workspace framework (#3246, @xmudrii)
  • Add --accept-permission-claim and --reject-permission-claim flag to kubectl kcp bind apiexport (#3334, @mjudeikis)
  • Add original user/groups information as extra to the impersonating client used by virtual workspace. (#3155, @turkenh)
  • Add support for external webhook authorization. (#3198, @xrstf)
  • Add user info support for scopes through the extra key authentication.kcp.io/scopes: cluster:<name>,... to contain a user in a certain cluster. Multiple extra values are conjunctive, i.e. their intersection is the allowed scope. (#3235, @sttts)
  • Enable structured authentication configuration from a file with —authentication-config flag. (#3295, @cnvergence)
  • Enhance local development experience for VirtualWorkspaces, adding --mappings-file option for local dev (#3199, @mjudeikis)
  • Provide --authorization-order flag that allows kcp administrator to tune the authorizer behaviour and rearrange the order. (#3281, @cnvergence)
  • Provide a feature gate GlobalServiceAccount that enables cross-workspace ServiceAccount authorization (requires --service-account-lookup=false in sharded environments). (#3328, @cnvergence)
  • Replicate APIExportEndpointSlices to cache server (#3277, @mjudeikis)

Bug or Regression

  • Fix critical race condition between APIBindings and CRDs potentially allowing the same resource to be bound by multiple bindings or CRDs, leading to data loss or inconsistent state. (#3251, @sttts)
  • Fix external modifications to annotations being reverted by admission webhook (#3229, @ntnn)
  • Add additional validation for impersonation to prevent groups and extras privileged impersonations. (#3243, @mjudeikis)
  • Fix regression in DeepCopy generator (#3188, @mjudeikis)
  • Purposefully crash if leader election was won but controllers failed to install, allowing another instance to take leadership (#3196, @embik)
  • Update kcp start options to print to stdout (#3237, @jmcshane)

Other (Cleanup or Flake)

  • Add wget to final image (#3240, @mjudeikis)
  • Build apigen binary on releases (#3326, @mjudeikis)
  • Crd-puller will generate files with 0644 permissions instead of 0777. (#3319, @xrstf)
  • Update golangci-lint to 1.26.2, remove dependency on standalone staticcheck binary (#3208, @xrstf)
  • kcp is built with Go 1.23.7 (#3331, @embik)
  • kcp is built with Go 1.22.10 (#3212, @embik)
  • kcp is built with Go 1.22.9 (#3200, @embik)

Dependencies

Added

Changed

Removed

Source: README.md, updated 2025-03-18