GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

runtime/

Details

Path	Synopsis
admission
cache
cel
cert
client
configuration
controller
events
gvk
handlers
indexers
customquota
ingress
namespace
resourcepool
serviceaccount Package serviceaccount contains keys shared by execution-identity indexes.	Package serviceaccount contains keys shared by execution-identity indexes.
tenant
tenantowner
tenantresource
jsonpath
predicates
quota
sanitize
selectors
ssa Package ssa manages the server-side apply lifecycle of rendered resources.	Package ssa manages the server-side apply lifecycle of rendered resources.
webhook
utils
workloads