api

Jul 6, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Jul 3, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Jun 24, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Changes in this version

+ type ExpressionMatch struct

+ Exact []string

+ func (in *ExpressionMatch) DeepCopy() *ExpressionMatch

+ func (in *ExpressionMatch) DeepCopyInto(out *ExpressionMatch)

+ func (m ExpressionMatch) Matches(value string) (bool, error)

+ func (m ExpressionMatch) MatchesWithExpressionMatcher(matcher ExpressionRegexMatcher, value string) (bool, error)

+ type ExpressionRegex struct

+ Expression string

+ Negate bool

+ type ExpressionRegexMatcher interface

+ MatchRegex func(expression ExpressionRegex, value string) (bool, error)

Jun 17, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Jun 9, 2026 GO-2024-3077 +1 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

Changes in this version

+ type RegExpression struct

+ Expression string

+ Negate bool

+ func (in *RegExpression) DeepCopy() *RegExpression

+ func (in *RegExpression) DeepCopyInto(out *RegExpression)

Jun 5, 2026 GO-2024-3077 +1 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

Jun 4, 2026 GO-2024-3077 +1 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

Jun 3, 2026 GO-2024-3077 +1 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

May 29, 2026 GO-2024-3077 +1 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

May 28, 2026 GO-2024-3077 +1 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

Changes in this version

+ type NamespaceRuleBodyNamespace struct

+ Enforce NamespaceRuleEnforceBody

+ func (in *NamespaceRuleBodyNamespace) DeepCopy() *NamespaceRuleBodyNamespace

+ func (in *NamespaceRuleBodyNamespace) DeepCopyInto(out *NamespaceRuleBodyNamespace)

+ type NamespaceRuleBodyTenant struct

+ NamespaceSelector *metav1.LabelSelector

+ Permissions NamespaceRulePermissionBody

+ func (in *NamespaceRuleBodyTenant) DeepCopy() *NamespaceRuleBodyTenant

+ func (in *NamespaceRuleBodyTenant) DeepCopyInto(out *NamespaceRuleBodyTenant)

+ type NamespaceRuleEnforceBody struct

+ Registries []OCIRegistry

+ func (in *NamespaceRuleEnforceBody) DeepCopy() *NamespaceRuleEnforceBody

+ func (in *NamespaceRuleEnforceBody) DeepCopyInto(out *NamespaceRuleEnforceBody)

+ type NamespaceRulePermissionBody struct

+ Promotions []*NamespaceRulePromotionRule

+ func (in *NamespaceRulePermissionBody) DeepCopy() *NamespaceRulePermissionBody

+ func (in *NamespaceRulePermissionBody) DeepCopyInto(out *NamespaceRulePermissionBody)

+ type NamespaceRulePromotionRule struct

+ ClusterRoles []string

+ Selector *metav1.LabelSelector

+ func (in *NamespaceRulePromotionRule) DeepCopy() *NamespaceRulePromotionRule

+ func (in *NamespaceRulePromotionRule) DeepCopyInto(out *NamespaceRulePromotionRule)

+ type OCIRegistry struct

+ Policy []corev1.PullPolicy

+ Registry string

+ Validation []RegistryValidationTarget

+ func (in *OCIRegistry) DeepCopy() *OCIRegistry

+ func (in *OCIRegistry) DeepCopyInto(out *OCIRegistry)

+ type RegistryValidationTarget string

+ const ValidateImages

+ const ValidateVolumes

+ type ResourceScope string

+ const ResourceScopeNamespace

+ const ResourceScopeNone

+ const ResourceScopeTenant

+ func (p ResourceScope) String() string

Dec 19, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Dec 11, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Dec 10, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Dec 9, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Dec 5, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Changes in this version

+ const DeleteOperation

+ const DeleterRoleName

+ const GroupOwner

+ const IngressClassesProxy

+ const ListOperation

+ const NodesProxy

+ const PersistentVolumesProxy

+ const PriorityClassesProxy

+ const ProvisionerRoleName

+ const RuntimeClassesProxy

+ const ServiceAccountOwner

+ const StorageClassesProxy

+ const TenantProxy

+ const UpdateOperation

+ const UserOwner

+ var ClusterRoles = map[string]*rbacv1.ClusterRole

+ var ProvisionerClusterRoleBinding = &rbacv1.ClusterRoleBinding

+ type ByKindAndName OwnerListSpec

+ func (b ByKindAndName) Len() int

+ func (b ByKindAndName) Less(i, j int) bool

+ func (b ByKindAndName) Swap(i, j int)

+ type ByKindName UserListSpec

+ func (b ByKindName) Len() int

+ func (b ByKindName) Less(i, j int) bool

+ func (b ByKindName) Swap(i, j int)

+ type CoreOwnerSpec struct

+ ClusterRoles []string

+ func (in *CoreOwnerSpec) DeepCopy() *CoreOwnerSpec

+ func (in *CoreOwnerSpec) DeepCopyInto(out *CoreOwnerSpec)

+ type GetByKindAndName OwnerStatusListSpec

+ func (b GetByKindAndName) Len() int

+ func (b GetByKindAndName) Less(i, j int) bool

+ func (b GetByKindAndName) Swap(i, j int)

+ type OwnerKind string

+ func (k OwnerKind) String() string

+ type OwnerListSpec []OwnerSpec

+ func (in OwnerListSpec) DeepCopy() OwnerListSpec

+ func (in OwnerListSpec) DeepCopyInto(out *OwnerListSpec)

+ func (o OwnerListSpec) FindOwner(name string, kind OwnerKind) (owner OwnerSpec)

+ func (o OwnerListSpec) IsOwner(name string, groups []string) bool

+ func (o OwnerListSpec) ToStatusOwners() OwnerStatusListSpec

+ type OwnerSpec struct

+ Annotations map[string]string

+ Labels map[string]string

+ ProxyOperations []ProxySettings

+ func (in *OwnerSpec) DeepCopy() *OwnerSpec

+ func (in *OwnerSpec) DeepCopyInto(out *OwnerSpec)

+ type OwnerStatusListSpec []CoreOwnerSpec

+ func (in OwnerStatusListSpec) DeepCopy() OwnerStatusListSpec

+ func (in OwnerStatusListSpec) DeepCopyInto(out *OwnerStatusListSpec)

+ func (o *OwnerStatusListSpec) Upsert(newOwner CoreOwnerSpec)

+ func (o OwnerStatusListSpec) FindOwner(name string, kind OwnerKind) (CoreOwnerSpec, bool)

+ func (o OwnerStatusListSpec) IsOwner(name string, groups []string) bool

+ type ProxyOperation string

+ func (p ProxyOperation) String() string

+ type ProxyServiceKind string

+ func (p ProxyServiceKind) String() string

+ type ProxySettings struct

+ Kind ProxyServiceKind

+ Operations []ProxyOperation

+ func (in *ProxySettings) DeepCopy() *ProxySettings

+ func (in *ProxySettings) DeepCopyInto(out *ProxySettings)

+ type UserKind string

+ func (k UserKind) String() string

+ type UserListSpec []UserSpec

+ func (in UserListSpec) DeepCopy() UserListSpec

+ func (in UserListSpec) DeepCopyInto(out *UserListSpec)

+ func (o UserListSpec) FindUser(name string, kind OwnerKind) (UserSpec, bool)

+ func (o UserListSpec) GetByKinds(kinds []OwnerKind) []string

+ func (u UserListSpec) IsPresent(name string, groups []string) bool

+ type UserSpec struct

+ Kind OwnerKind

+ Name string

+ func (in *UserSpec) DeepCopy() *UserSpec

+ func (in *UserSpec) DeepCopyInto(out *UserSpec)

Oct 26, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Oct 23, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Oct 20, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Changes in this version

type AdditionalRoleBindingsSpec

+ Annotations map[string]string

+ Labels map[string]string

Sep 4, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Aug 25, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Aug 22, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Aug 20, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Aug 18, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Aug 14, 2025 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Aug 1, 2025 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Jul 21, 2025 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Jul 1, 2025 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Changes in this version

+ type PoolExhaustionResource struct

+ Available resource.Quantity

+ Requesting resource.Quantity

+ func (in *PoolExhaustionResource) DeepCopy() *PoolExhaustionResource

+ func (in *PoolExhaustionResource) DeepCopyInto(out *PoolExhaustionResource)

May 22, 2025 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Changes in this version

+ type Name string

+ func (n Name) String() string

+ type NamespaceSelector struct

+ func (in *NamespaceSelector) DeepCopy() *NamespaceSelector

+ func (in *NamespaceSelector) DeepCopyInto(out *NamespaceSelector)

+ func (s *NamespaceSelector) GetMatchingNamespaces(ctx context.Context, client client.Client) ([]corev1.Namespace, error)

+ type SelectionListWithDefaultSpec struct

+ Default string

+ func (in *SelectionListWithDefaultSpec) DeepCopy() *SelectionListWithDefaultSpec

+ func (in *SelectionListWithDefaultSpec) DeepCopyInto(out *SelectionListWithDefaultSpec)

+ func (in *SelectionListWithDefaultSpec) MatchDefault(value string) bool

+ type SelectionListWithSpec struct

+ func (in *SelectionListWithSpec) DeepCopy() *SelectionListWithSpec

+ func (in *SelectionListWithSpec) DeepCopyInto(out *SelectionListWithSpec)

+ func (in *SelectionListWithSpec) SelectorMatch(obj client.Object) bool

+ type StatusNameUID struct

+ Name Name

+ Namespace Name

May 9, 2025 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Changes in this version

+ type AdditionalMetadataSelectorSpec struct

+ Annotations map[string]string

+ Labels map[string]string

+ NamespaceSelector *metav1.LabelSelector

+ func (in *AdditionalMetadataSelectorSpec) DeepCopy() *AdditionalMetadataSelectorSpec

+ func (in *AdditionalMetadataSelectorSpec) DeepCopyInto(out *AdditionalMetadataSelectorSpec)

May 1, 2025 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Apr 30, 2025 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Feb 10, 2025 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Feb 5, 2025 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Oct 23, 2024 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Changes in this version

+ type TenantSubjectRoles struct

+ ClusterRoles []string

+ Kind string

+ Name string

Aug 25, 2024 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Jun 24, 2024 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

May 14, 2024 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Mar 28, 2024 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Feb 27, 2024 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Feb 27, 2024 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Feb 18, 2024 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Dec 7, 2023 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Changes in this version

+ const ForbiddenAnnotationReason

+ const ForbiddenLabelReason

+ const TenantNameLabel

+ func NewForbiddenError(key string, forbiddenSpec ForbiddenListSpec) error

+ func ValidateForbidden(metadata map[string]string, forbiddenList ForbiddenListSpec) error

+ type ForbiddenError struct

+ func (f ForbiddenError) Error() string

+ type PodOptions struct

+ AdditionalMetadata *AdditionalMetadataSpec

+ func (in *PodOptions) DeepCopy() *PodOptions

+ func (in *PodOptions) DeepCopyInto(out *PodOptions)

type ServiceOptions

+ ForbiddenAnnotations ForbiddenListSpec

+ ForbiddenLabels ForbiddenListSpec

Nov 21, 2023 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Nov 9, 2023 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Nov 6, 2023 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Changes in this version

+ const ForbiddenNamespaceAnnotationsAnnotation

+ const ForbiddenNamespaceAnnotationsRegexpAnnotation

+ const ForbiddenNamespaceLabelsAnnotation

+ const ForbiddenNamespaceLabelsRegexpAnnotation

+ const ProtectedTenantAnnotation

+ type AdditionalMetadataSpec struct

+ Annotations map[string]string

+ Labels map[string]string

+ func (in *AdditionalMetadataSpec) DeepCopy() *AdditionalMetadataSpec

+ func (in *AdditionalMetadataSpec) DeepCopyInto(out *AdditionalMetadataSpec)

+ type AdditionalRoleBindingsSpec struct

+ ClusterRoleName string

+ Subjects []rbacv1.Subject

+ func (in *AdditionalRoleBindingsSpec) DeepCopy() *AdditionalRoleBindingsSpec

+ func (in *AdditionalRoleBindingsSpec) DeepCopyInto(out *AdditionalRoleBindingsSpec)

+ type AllowedIP string

+ type AllowedListSpec struct

+ Exact []string

+ Regex string

+ func (in *AllowedListSpec) DeepCopy() *AllowedListSpec

+ func (in *AllowedListSpec) DeepCopyInto(out *AllowedListSpec)

+ func (in *AllowedListSpec) ExactMatch(value string) (ok bool)

+ func (in *AllowedListSpec) Match(value string) (ok bool)

+ func (in *AllowedListSpec) RegexMatch(value string) (ok bool)

+ type AllowedServices struct

+ ExternalName *bool

+ LoadBalancer *bool

+ NodePort *bool

+ func (in *AllowedServices) DeepCopy() *AllowedServices

+ func (in *AllowedServices) DeepCopyInto(out *AllowedServices)

+ type DefaultAllowedListSpec struct

+ Default string

+ func (in *DefaultAllowedListSpec) DeepCopy() *DefaultAllowedListSpec

+ func (in *DefaultAllowedListSpec) DeepCopyInto(out *DefaultAllowedListSpec)

+ func (in *DefaultAllowedListSpec) MatchDefault(value string) bool

+ type ExternalServiceIPsSpec struct

+ Allowed []AllowedIP

+ func (in *ExternalServiceIPsSpec) DeepCopy() *ExternalServiceIPsSpec

+ func (in *ExternalServiceIPsSpec) DeepCopyInto(out *ExternalServiceIPsSpec)

+ type ForbiddenListSpec struct

+ Exact []string

+ Regex string

+ func (in *ForbiddenListSpec) DeepCopy() *ForbiddenListSpec

+ func (in *ForbiddenListSpec) DeepCopyInto(out *ForbiddenListSpec)

+ func (in ForbiddenListSpec) ExactMatch(value string) (ok bool)

+ func (in ForbiddenListSpec) RegexMatch(value string) (ok bool)

+ type HostnameCollisionScope string

+ const HostnameCollisionScopeCluster

+ const HostnameCollisionScopeDisabled

+ const HostnameCollisionScopeNamespace

+ const HostnameCollisionScopeTenant

+ type ImagePullPolicySpec string

+ func (i ImagePullPolicySpec) String() string

+ type LimitRangesSpec struct

+ Items []corev1.LimitRangeSpec

+ func (in *LimitRangesSpec) DeepCopy() *LimitRangesSpec

+ func (in *LimitRangesSpec) DeepCopyInto(out *LimitRangesSpec)

+ type NetworkPolicySpec struct

+ Items []networkingv1.NetworkPolicySpec

+ func (in *NetworkPolicySpec) DeepCopy() *NetworkPolicySpec

+ func (in *NetworkPolicySpec) DeepCopyInto(out *NetworkPolicySpec)

+ type ResourceQuotaScope string

+ const ResourceQuotaScopeNamespace

+ const ResourceQuotaScopeTenant

+ type ResourceQuotaSpec struct

+ Items []corev1.ResourceQuotaSpec

+ Scope ResourceQuotaScope

+ func (in *ResourceQuotaSpec) DeepCopy() *ResourceQuotaSpec

+ func (in *ResourceQuotaSpec) DeepCopyInto(out *ResourceQuotaSpec)

+ type SelectorAllowedListSpec struct

+ func (in *SelectorAllowedListSpec) DeepCopy() *SelectorAllowedListSpec

+ func (in *SelectorAllowedListSpec) DeepCopyInto(out *SelectorAllowedListSpec)

+ func (in *SelectorAllowedListSpec) MatchSelectByName(obj client.Object) bool

+ func (in *SelectorAllowedListSpec) SelectorMatch(obj client.Object) bool

+ type ServiceOptions struct

+ AdditionalMetadata *AdditionalMetadataSpec

+ AllowedServices *AllowedServices

+ ExternalServiceIPs *ExternalServiceIPsSpec

+ func (in *ServiceOptions) DeepCopy() *ServiceOptions

+ func (in *ServiceOptions) DeepCopyInto(out *ServiceOptions)

+ type Tenant interface

+ GetNamespaces func() []string

Oct 26, 2023 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Oct 23, 2023 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Oct 20, 2023 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

  GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

  GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule