GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

ingress

package

v0.0.5-rc2 Latest Latest Go to latest Published: Mar 6, 2021 License: Apache-2.0 Imports: 14 Imported by: 0

Details

This section is empty.

This section is empty.

func Handler(allowIngressHostnamesCollision bool) capsulewebhook.Handler

func NewIngressClassForbidden(className string, spec v1alpha1.AllowedListSpec) error

func NewIngressClassNotValid(spec v1alpha1.AllowedListSpec) error

func NewIngressHostnameCollision(hostname string) error

func NewIngressHostnamesNotValid(invalidHostnames []string, notMatchingHostnames []string, spec v1alpha1.AllowedListSpec) error

func Webhook(handler capsulewebhook.Handler) capsulewebhook.Webhook

type Extension struct {
	*extensionsv1beta1.Ingress
}

func (e Extension) Hostnames() []string

func (e Extension) IngressClass() (res *string)

func (e Extension) Name() string

func (e Extension) Namespace() string

type Ingress interface {
	IngressClass() *string
	Namespace() string
	Name() string
	Hostnames() []string
}

type NetworkingV1 struct {
	*networkingv1.Ingress
}

func (n NetworkingV1) Hostnames() []string

func (n NetworkingV1) IngressClass() (res *string)

func (n NetworkingV1) Name() string

func (n NetworkingV1) Namespace() string

type NetworkingV1Beta1 struct {
	*networkingv1beta.Ingress
}

func (n NetworkingV1Beta1) Hostnames() []string

func (n NetworkingV1Beta1) IngressClass() (res *string)

func (n NetworkingV1Beta1) Name() string

func (n NetworkingV1Beta1) Namespace() string