Affected by GO-2024-3077 and 3 other vulnerabilities

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

meta

package

v0.10.1 Latest Latest Go to latest Published: Jul 1, 2025 License: Apache-2.0 Imports: 5 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func FreezeLabelRemove(obj client.Object)
func FreezeLabelTriggers(obj client.Object) bool
func HasLooseOwnerReference(obj client.Object, owner client.Object) bool
func NewAssignedCondition(obj client.Object) metav1.Condition
func NewBoundCondition(obj client.Object) metav1.Condition
func ReleaseAnnotationRemove(obj client.Object)
func ReleaseAnnotationTriggers(obj client.Object) bool
func RemoveLooseOwnerReference(obj client.Object, owner client.Object)
func SetLooseOwnerReference(obj client.Object, owner client.Object, schema *runtime.Scheme) (err error)

Constants ¶

View Source

const (
	ReleaseAnnotation        = "projectcapsule.dev/release"
	ReleaseAnnotationTrigger = "true"
)

View Source

const (
	// ReadyCondition indicates the resource is ready and fully reconciled.
	ReadyCondition    string = "Ready"
	NotReadyCondition string = "NotReady"

	AssignedCondition string = "Assigned"
	BoundCondition    string = "Bound"

	// FailedReason indicates a condition or event observed a failure (Claim Rejected).
	SucceededReason          string = "Succeeded"
	FailedReason             string = "Failed"
	PoolExhaustedReason      string = "PoolExhausted"
	QueueExhaustedReason     string = "QueueExhausted"
	NamespaceExhaustedReason string = "NamespaceExhausted"
)

View Source

const (
	FreezeLabel        = "projectcapsule.dev/freeze"
	FreezeLabelTrigger = "true"
)

View Source

const (
	ControllerFinalizer = "controller.projectcapsule.dev/finalize"
)

Variables ¶

This section is empty.

Functions ¶

func FreezeLabelRemove ¶

func FreezeLabelRemove(obj client.Object)

func FreezeLabelTriggers ¶

func FreezeLabelTriggers(obj client.Object) bool

func HasLooseOwnerReference ¶

func HasLooseOwnerReference(
	obj client.Object,
	owner client.Object,
) bool

If not returns false.

func NewAssignedCondition ¶

func NewAssignedCondition(obj client.Object) metav1.Condition

func NewBoundCondition ¶

func NewBoundCondition(obj client.Object) metav1.Condition

func ReleaseAnnotationRemove ¶

func ReleaseAnnotationRemove(obj client.Object)

func ReleaseAnnotationTriggers ¶

func ReleaseAnnotationTriggers(obj client.Object) bool

func RemoveLooseOwnerReference ¶

func RemoveLooseOwnerReference(
	obj client.Object,
	owner client.Object,
)

Removes a Loose Ownerreference based on UID.

func SetLooseOwnerReference ¶

func SetLooseOwnerReference(
	obj client.Object,
	owner client.Object,
	schema *runtime.Scheme,
) (err error)

Adds an ownerreferences, which does not delete the object when the owner is deleted.

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL