GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

route

package

v0.11.2 Latest Latest Go to latest Published: Oct 26, 2025 License: Apache-2.0 Imports: 1 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

func Cordoning(handlers ...capsulewebhook.Handler) capsulewebhook.Webhook
func CustomResources(handlers ...capsulewebhook.Handler) capsulewebhook.Webhook
func Defaults(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func Gateway(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func Ingress(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func Namespace(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func NamespacePatch(handlers ...capsulewebhook.Handler) capsulewebhook.Webhook
func NetworkPolicy(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func Node(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func OwnerReference(handlers ...capsulewebhook.Handler) capsulewebhook.Webhook
func PVC(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func Pod(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func ResourcePoolClaimMutation(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func ResourcePoolClaimValidation(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func ResourcePoolMutation(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func ResourcePoolValidation(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func Service(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func ServiceAccounts(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func TenantMutating(handler ...capsulewebhook.Handler) capsulewebhook.Webhook
func TenantResourceObjects(handlers ...capsulewebhook.Handler) capsulewebhook.Webhook
func TenantValidating(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func Cordoning ¶

func Cordoning(handlers ...capsulewebhook.Handler) capsulewebhook.Webhook

func CustomResources ¶ added in v0.9.0

func CustomResources(handlers ...capsulewebhook.Handler) capsulewebhook.Webhook

func Defaults ¶

func Defaults(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func Gateway ¶ added in v0.10.0

func Gateway(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func Ingress ¶

func Ingress(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func Namespace ¶

func Namespace(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func NamespacePatch ¶ added in v0.9.0

func NamespacePatch(handlers ...capsulewebhook.Handler) capsulewebhook.Webhook

func NetworkPolicy ¶

func NetworkPolicy(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func Node ¶

func Node(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func OwnerReference ¶

func OwnerReference(handlers ...capsulewebhook.Handler) capsulewebhook.Webhook

func PVC ¶

func PVC(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func Pod ¶

func Pod(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func ResourcePoolClaimMutation ¶ added in v0.10.0

func ResourcePoolClaimMutation(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func ResourcePoolClaimValidation ¶ added in v0.10.0

func ResourcePoolClaimValidation(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func ResourcePoolMutation ¶ added in v0.10.0

func ResourcePoolMutation(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func ResourcePoolValidation ¶ added in v0.10.0

func ResourcePoolValidation(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func Service ¶

func Service(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func ServiceAccounts ¶ added in v0.11.0

func ServiceAccounts(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func TenantMutating ¶ added in v0.11.0

func TenantMutating(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

func TenantResourceObjects ¶

func TenantResourceObjects(handlers ...capsulewebhook.Handler) capsulewebhook.Webhook

func TenantValidating ¶ added in v0.11.0

func TenantValidating(handler ...capsulewebhook.Handler) capsulewebhook.Webhook

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL