Help us shape the future of Go! Take the 2026 Go Developer Survey

Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

utils

package

v0.15.1 Latest Latest Go to latest Published: Oct 22, 2026 License: Apache-2.0 Imports: 25 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func BuildNodeSelector(tnt *capsulev1beta2.Tenant, nsAnnotations map[string]string) map[string]string
func CompileFieldSelector(cache *cache.JSONPathCache, raw string) (selectors.CompiledFieldSelector, error)
func GetK8sVersionFromConfig(dc discovery.DiscoveryInterface) (*version.Version, error)
func GetTypeLabel(t runtime.Object) (label string, err error)
func IgnoreWrappedNotFound(err error) error
func IsNamespaceSelectedBySelector(ns *corev1.Namespace, selector *metav1.LabelSelector) (bool, error)
func IsUnsupportedAPI(err error) bool
func MapEqual(a, b map[string]string) bool
func MapMergeNoOverrite(dst, src map[string]string)
func Mapify(data any) map[string]any
func NodeWebhookSupported(currentVersion *version.Version) (bool, error)
func RoleBindingHashFunc(binding rbac.AdditionalRoleBindingsSpec) string
func ToUnstructuredMap(obj any) (map[string]any, error)

Constants ¶

View Source

const (
	NodeSelectorAnnotation = "scheduler.alpha.kubernetes.io/node-selector"
)

Variables ¶

This section is empty.

Functions ¶

func BuildNodeSelector ¶

func BuildNodeSelector(tnt *capsulev1beta2.Tenant, nsAnnotations map[string]string) map[string]string

func CompileFieldSelector ¶ added in v0.13.4

func CompileFieldSelector(
	cache *cache.JSONPathCache,
	raw string,
) (selectors.CompiledFieldSelector, error)

func GetK8sVersionFromConfig ¶ added in v0.13.0

func GetK8sVersionFromConfig(dc discovery.DiscoveryInterface) (*version.Version, error)

func GetTypeLabel ¶

func GetTypeLabel(t runtime.Object) (label string, err error)

func IgnoreWrappedNotFound ¶ added in v0.13.0

func IgnoreWrappedNotFound(err error) error

func IsNamespaceSelectedBySelector ¶ added in v0.9.0

func IsNamespaceSelectedBySelector(ns *corev1.Namespace, selector *metav1.LabelSelector) (bool, error)

func IsUnsupportedAPI ¶

func IsUnsupportedAPI(err error) bool

func MapEqual ¶ added in v0.13.0

func MapEqual(a, b map[string]string) bool

func MapMergeNoOverrite ¶ added in v0.11.0

func MapMergeNoOverrite(dst, src map[string]string)

func Mapify ¶ added in v0.13.0

func Mapify(data any) map[string]any

func NodeWebhookSupported ¶ added in v0.13.0

func NodeWebhookSupported(currentVersion *version.Version) (bool, error)

func RoleBindingHashFunc ¶ added in v0.13.0

func RoleBindingHashFunc(binding rbac.AdditionalRoleBindingsSpec) string

func ToUnstructuredMap ¶ added in v0.13.0

func ToUnstructuredMap(obj any) (map[string]any, error)

Types ¶

This section is empty.

Source Files ¶

View all Source files