kubesphere-core

KubeSphere central controller Skill. Routes to specific Skills based on user requests: multi-cluster management (kubesphere-cluster-management), mul…

读凭据写文件读文件联网严重 0 · 高危 4kubesphere/kubesphere

它会碰到什么

扫了多少2 个文本文件，12 KB

它会碰到什么读凭据写文件读文件联网

命中总数9 处

命中统计严重 0 · 高 4 · 中 3 · 低 2

逐条看命中（4 条严重或高危）

高 scripts/ks_api.py:113cred-envread

default=os.environ.get("KUBESPHERE_USERNAME", "admin"),

高 scripts/ks_api.py:118cred-envread

default=os.environ.get("KUBESPHERE_PASSWORD"),

高 scripts/ks_api.py:139cred-envread

default=os.environ.get("KUBESPHERE_HOST", "http://ks-apiserver.kubesphere-system"),

高 scripts/ks_api.py:144cred-envread

default=os.environ.get("KUBESPHERE_TOKEN"),

这一栏是扫描器报的事实，不是结论。命中多不等于有毒（安全工具、规则库、示例脚本本来就会包含危险写法），命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系，需要你自己看。

技能内容

KubeSphere Core

Overview

KubeSphere is a distributed operating system for cloud-native application management built on Kubernetes. Version 4.x adopts a microkernel + extension architecture (codename LuBan) where the core provides essential functions and independent functional modules are delivered as extensions.

Core Architecture

┌─────────────────────────────────────────────────────────────────────────────────────────────────────────────────┐
│                                              KubeSphere Console                                                 │
│                                   (React-based Web UI + Extension Framework)                                    │
└────────────────────────────────────────────────────────────┬────────────────────────────────────────────────────┘
                                                             │
┌────────────────────────────────────────────────────────────▼────────────────────────────────────────────────────┐
│                                            KubeSphere Core (LuBan)                                              │
│  ┌───────────────────┐ ┌───────────────────┐ ┌───────────────────┐ ┌───────────────────┐ ┌───────────────────┐  │
│  │ Multi-Cluster     │ │ Multi-Tenant      │ │ K8s Resource      │ │ Extension         │ │ Application       │  │
│  │ Management        │ │ Management        │ │ Management        │ │ Management        │ │ Management        │  │
│  └───────────────────┘ └───────────────────┘ └───────────────────┘ └───────────────────┘ └───────────────────┘  │
└────────────────────────────────────────────────────────────┬────────────────────────────────────────────────────┘
                                                             │
┌────────────────────────────────────────────────────────────▼────────────────────────────────────────────────────┐
│                                      Underlying Kubernetes Clusters                                             │
└─────────────────────────────────────────────────────────────────────────────────────────────────────────────────┘

Core Components

| Component | Description |

|-----------|-------------|

| ks-apiserver | API aggregation layer. Acts as the central API entry point for KubeSphere, aggregating APIs from core services and extensions. Handles authentication, authorization, and multi-cluster API routing. |

| ks-controller-manager | Resource controllers. Manages the lifecycle of KubeSphere custom resources (workspaces, projects, users, etc.). Reconciles desired state and handles event-driven operations. |

| ks-console | Web UI. React-based console providing visual management interface for all KubeSphere capabilities. Supports extension framework for custom UI components. |

API

API Path Prefixes

KubeSphere provides two main API path prefixes with different routing behaviors:

| Path Prefix | Routed To | Use Case |

|-------------|-----------|----------|

| /apis/ | kube-apiserver on target cluster | Direct Kubernetes CRUD operations |

| /kapis/ | KubeSphere API server | KubeSphere-specific APIs, workspace-scoped operations |

Multi-Cluster API Routing

Use the /clusters/{cluster-name}/ prefix to forward requests to specific member clusters:

# Access member-1 cluster
/clusters/member-1/kapis/tenant.kubesphere.io/v1beta1/workspaces/demo/namespaces

API Script Usage

Use the ks_api.py script to make API calls. The script handles authentication automatically.

Prerequisites:

pip install requests
export KUBESPHERE_HOST="http://<kubesphere-host>"
python scripts/ks_api.py --login --username admin --password <password>

Usage:

# Get token info
python scripts/ks_api.py

# List resources (GET)
python scripts/ks_api.py GET /kapis/tenant.kubesphere.io/v1beta1/workspacetemplates

# Query specific cluster
python scripts/ks_api.py GET /clusters/member-1/kapis/tenant.kubesphere.io/v1beta1/namespaces

# Clear cached token
python scripts/ks_api.py --clear-cache

Skill Routing

kubesphere-core routes to specific Skills based on user requests.

| Skill | Capabilities | Restrictions |

|-------|--------------|--------------|

| kubesphere-core | Architecture, API routing, API utilities | No management operations |

| kubesphere-cluster-management | Multi-cluster management | Cluster operations |

| kubesphere-multi-tenant-management | Create user/workspace/project, assign roles | No delete, No custom roles |

| kubesphere-extension-management | Extension install/upgrade/uninstall | Extension-related only |

References

想直接用这个技能？

本站把开放许可（MIT / Apache 等）的技能按仓库打包整理到网盘，点一下转存到你自己的网盘，不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接，不打包。

去原始仓库

它属于哪个仓库

仓库kubesphere/kubesphere

星标★ 17,050

本站分层T1

该仓技能数32

原文件路径skills/kubesphere-core/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 32 个技能