GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

tenantresource

package

v0.13.10 Latest Latest Go to latest Published: Jul 22, 2026 License: Apache-2.0 Imports: 3 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Constants ¶

View Source

const (
	ServiceAccountIndexerFieldName string = "spec.serviceaccount"
	ProcessedIndexerFieldName      string = "status.items"
	CreatedIndexerFieldName        string = "status.items.created"
	NamespaceIndexerFieldName      string = "metadata.namespace"
)

View Source

const (
	GlobalDependenciesFieldName     = ".spec.dependsOn.global"
	NamespacedDependenciesFieldName = ".spec.dependsOn.namespaced"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type GlobalCreatedItems ¶

type GlobalCreatedItems struct{}

func (GlobalCreatedItems) Field ¶

func (g GlobalCreatedItems) Field() string

func (GlobalCreatedItems) Func ¶

func (g GlobalCreatedItems) Func() client.IndexerFunc

func (GlobalCreatedItems) Object ¶

func (g GlobalCreatedItems) Object() client.Object

type GlobalDependencies ¶ added in v0.13.10

type GlobalDependencies struct{}

func (GlobalDependencies) Field ¶ added in v0.13.10

func (GlobalDependencies) Field() string

func (GlobalDependencies) Func ¶ added in v0.13.10

func (GlobalDependencies) Func() client.IndexerFunc

func (GlobalDependencies) Object ¶ added in v0.13.10

func (GlobalDependencies) Object() client.Object

type GlobalProcessedItems ¶

type GlobalProcessedItems struct{}

func (GlobalProcessedItems) Field ¶

func (g GlobalProcessedItems) Field() string

func (GlobalProcessedItems) Func ¶

func (g GlobalProcessedItems) Func() client.IndexerFunc

func (GlobalProcessedItems) Object ¶

func (g GlobalProcessedItems) Object() client.Object

type GlobalServiceAccount ¶

type GlobalServiceAccount struct{}

func (GlobalServiceAccount) Field ¶

func (g GlobalServiceAccount) Field() string

func (GlobalServiceAccount) Func ¶

func (g GlobalServiceAccount) Func() client.IndexerFunc

func (GlobalServiceAccount) Object ¶

func (g GlobalServiceAccount) Object() client.Object

type NamespacedCreatedItems ¶

type NamespacedCreatedItems struct{}

func (NamespacedCreatedItems) Field ¶

func (g NamespacedCreatedItems) Field() string

func (NamespacedCreatedItems) Func ¶

func (g NamespacedCreatedItems) Func() client.IndexerFunc

func (NamespacedCreatedItems) Object ¶

func (g NamespacedCreatedItems) Object() client.Object

type NamespacedDependencies ¶ added in v0.13.10

type NamespacedDependencies struct{}

func (NamespacedDependencies) Field ¶ added in v0.13.10

func (NamespacedDependencies) Field() string

func (NamespacedDependencies) Func ¶ added in v0.13.10

func (NamespacedDependencies) Func() client.IndexerFunc

func (NamespacedDependencies) Object ¶ added in v0.13.10

func (NamespacedDependencies) Object() client.Object

type NamespacedProcessedItems ¶

type NamespacedProcessedItems struct{}

func (NamespacedProcessedItems) Field ¶

func (g NamespacedProcessedItems) Field() string

func (NamespacedProcessedItems) Func ¶

func (g NamespacedProcessedItems) Func() client.IndexerFunc

func (NamespacedProcessedItems) Object ¶

func (g NamespacedProcessedItems) Object() client.Object

type NamespacedResourceNamespace ¶

type NamespacedResourceNamespace struct{}

func (NamespacedResourceNamespace) Field ¶

func (g NamespacedResourceNamespace) Field() string

func (NamespacedResourceNamespace) Func ¶

func (g NamespacedResourceNamespace) Func() client.IndexerFunc

func (NamespacedResourceNamespace) Object ¶

func (g NamespacedResourceNamespace) Object() client.Object

type NamespacedServiceAccount ¶

type NamespacedServiceAccount struct{}

func (NamespacedServiceAccount) Field ¶

func (g NamespacedServiceAccount) Field() string

func (NamespacedServiceAccount) Func ¶

func (g NamespacedServiceAccount) Func() client.IndexerFunc

func (NamespacedServiceAccount) Object ¶

func (g NamespacedServiceAccount) Object() client.Object

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL