GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

internal/

Details

Path	Synopsis
cache
controllers
admission
cfg/invalidator
cfg/status
customquotas
globalresourcequotas
pod
pv
rbac
resourcepools
resources
rulestatus
servicelabels
tenant
tenantowner
tls
utils
metrics
mocks
client Package mock_client is a generated GoMock package.	Package mock_client is a generated GoMock package.
quota
evaluator Package evaluator contains the admission-side resource calculations used by GlobalResourceQuota.	Package evaluator contains the admission-side resource calculations used by GlobalResourceQuota.
version
webhook
cfg
customquota
defaults
dra
gateway
generic
globalresourcequota
ingress
namespace/mutation
namespace/validation
node
owners
pod
pvc
resourcepool
route
rules/generic/mutation
rules/generic/validation
rules/networkpolicies/validation
rules/pods/validation
rules/pvc/validation
rules/services/validation
rules/status
service
serviceaccounts
tenant/mutation
tenant/validation
test
utils