Affected by GO-2024-3077 and 4 other vulnerabilities

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule

GO-2026-6520: Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement in github.com/projectcapsule/capsule

utils

package

v0.12.1 Latest Latest Go to latest Published: Dec 9, 2025 License: Apache-2.0 Imports: 16 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func BuildNodeSelector(tnt *capsulev1beta2.Tenant, nsAnnotations map[string]string) map[string]string
func GetTypeLabel(t runtime.Object) (label string, err error)
func IsNamespaceSelectedBySelector(ns *corev1.Namespace, selector *metav1.LabelSelector) (bool, error)
func IsUnsupportedAPI(err error) bool
func MapMergeNoOverrite(dst, src map[string]string)

Constants ¶

View Source

const (
	NodeSelectorAnnotation = "scheduler.alpha.kubernetes.io/node-selector"
)

Variables ¶

This section is empty.

Functions ¶

func BuildNodeSelector ¶

func BuildNodeSelector(tnt *capsulev1beta2.Tenant, nsAnnotations map[string]string) map[string]string

func GetTypeLabel ¶

func GetTypeLabel(t runtime.Object) (label string, err error)

func IsNamespaceSelectedBySelector ¶ added in v0.9.0

func IsNamespaceSelectedBySelector(ns *corev1.Namespace, selector *metav1.LabelSelector) (bool, error)

func IsUnsupportedAPI ¶

func IsUnsupportedAPI(err error) bool

func MapMergeNoOverrite ¶ added in v0.11.0

func MapMergeNoOverrite(dst, src map[string]string)

Types ¶

This section is empty.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
tenant
users

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL