gistfile1.txt

$ cat workspace-source.yaml
apiVersion: tenancy.kcp.dev/v1alpha1
kind: Workspace
metadata:
  name: source
spec:
  shard: abc

$ cat workspace-target.yaml
apiVersion: tenancy.kcp.dev/v1alpha1
kind: Workspace
metadata:
  name: target
spec:
  shard: abc
  inheritFrom: source

$ echo $SOURCE
https://192.168.4.118:6443/clusters/source

$ echo $TARGET
https://192.168.4.118:6443/clusters/target

# 'source' logical cluster has deployments CRD
$ k --server="$SOURCE" --insecure-skip-tls-verify get crd
NAME               CREATED AT
deployments.apps   2021-11-17T21:06:37Z

# 'source' logical cluster has apps apiservice
$ k --server="$SOURCE" --insecure-skip-tls-verify get apiservices
NAME      SERVICE   AVAILABLE   AGE
v1.apps   Local     True        3m15s

# 'target' doesn't
$ k --server="$TARGET" --insecure-skip-tls-verify get crd
No resources found

# 'target' doesn't
$ k --server="$TARGET" --insecure-skip-tls-verify get apiservices
No resources found

# Look at group discovery in 'source' logical cluster - it has "apps"
$ k get --raw /clusters/source/apis | jq '.groups | sort_by(.name) | .[].name'
"apiextensions.k8s.io"
"apiregistration.k8s.io"
"apps"
"authentication.k8s.io"
"authorization.k8s.io"
"certificates.k8s.io"
"coordination.k8s.io"
"events.k8s.io"
"flowcontrol.apiserver.k8s.io"
"rbac.authorization.k8s.io"

# Look at discovery from some other logical cluster - no "apps"
$ k get --raw /clusters/some-other/apis | jq '.groups | sort_by(.name) | .[].name'
"apiextensions.k8s.io"
"apiregistration.k8s.io"
"authentication.k8s.io"
"authorization.k8s.io"
"certificates.k8s.io"
"coordination.k8s.io"
"events.k8s.io"
"flowcontrol.apiserver.k8s.io"
"rbac.authorization.k8s.io"

# Look at 'target' logical cluster - it's inheriting "apps" in discovery from "source" logical cluster!
$ k get --raw /clusters/target/apis | jq '.groups | sort_by(.name) | .[].name'
"apiextensions.k8s.io"
"apiregistration.k8s.io"
"apps"
"authentication.k8s.io"
"authorization.k8s.io"
"certificates.k8s.io"
"coordination.k8s.io"
"events.k8s.io"
"flowcontrol.apiserver.k8s.io"
"rbac.authorization.k8s.io"