Affected by GO-2024-3077 and 4 other vulnerabilities

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule

GO-2026-6520: Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement in github.com/projectcapsule/capsule

resources

package

v0.12.0 Latest Latest Go to latest Published: Dec 5, 2025 License: Apache-2.0 Imports: 27 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
type Global
- func (r *Global) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error)
- func (r *Global) SetupWithManager(mgr ctrl.Manager, cfg utils.ControllerOptions) error
type Namespaced
- func (r *Namespaced) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error)
- func (r *Namespaced) SetupWithManager(mgr ctrl.Manager, cfg utils.ControllerOptions) error
type Processor
- func (r *Processor) HandlePruning(ctx context.Context, current, desired sets.Set[string]) (updateStatus bool)
- func (r *Processor) HandleSection(ctx context.Context, tnt capsulev1beta2.Tenant, ...) ([]string, error)

Constants ¶

View Source

const (
	Label = "capsule.clastix.io/resources"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Global ¶

type Global struct {
	// contains filtered or unexported fields
}

func (*Global) Reconcile ¶

func (r *Global) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error)

func (*Global) SetupWithManager ¶

func (r *Global) SetupWithManager(mgr ctrl.Manager, cfg utils.ControllerOptions) error

type Namespaced ¶

type Namespaced struct {
	// contains filtered or unexported fields
}

func (*Namespaced) Reconcile ¶

func (r *Namespaced) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error)

func (*Namespaced) SetupWithManager ¶

func (r *Namespaced) SetupWithManager(mgr ctrl.Manager, cfg utils.ControllerOptions) error

type Processor ¶

type Processor struct {
	// contains filtered or unexported fields
}

func (*Processor) HandlePruning ¶

func (r *Processor) HandlePruning(ctx context.Context, current, desired sets.Set[string]) (updateStatus bool)

func (*Processor) HandleSection ¶

func (r *Processor) HandleSection(ctx context.Context, tnt capsulev1beta2.Tenant, allowCrossNamespaceSelection bool, tenantLabel string, resourceIndex int, spec capsulev1beta2.ResourceSpec) ([]string, error)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL