predicates

Sep 3, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Aug 31, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Aug 25, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Aug 25, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Aug 21, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Changes in this version

+ type CreatedAfterPredicate struct

+ Since metav1.Time

+ func NewCreatedAfterPredicate(since time.Time) CreatedAfterPredicate

+ func (p CreatedAfterPredicate) Create(e event.CreateEvent) bool

+ func (p CreatedAfterPredicate) Delete(event.DeleteEvent) bool

+ func (p CreatedAfterPredicate) Generic(event.GenericEvent) bool

+ func (p CreatedAfterPredicate) Update(event.UpdateEvent) bool

Jul 28, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Jul 22, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Changes in this version

+ const AdmissionStateHashAnnotation

+ func ClassChanged() predicate.Predicate

+ func MutatingAdmissionStateHash(obj *admissionv1.MutatingWebhookConfiguration) string

+ func ValidatingAdmissionStateHash(obj *admissionv1.ValidatingWebhookConfiguration) string

+ type DeletionChangedPredicate struct

+ func (DeletionChangedPredicate) Create(event.CreateEvent) bool

+ func (DeletionChangedPredicate) Delete(event.DeleteEvent) bool

+ func (DeletionChangedPredicate) Generic(event.GenericEvent) bool

+ func (DeletionChangedPredicate) Update(e event.UpdateEvent) bool

+ type DependencyStateChangedPredicate struct

+ func (DependencyStateChangedPredicate) Create(event.CreateEvent) bool

+ func (DependencyStateChangedPredicate) Delete(event.DeleteEvent) bool

+ func (DependencyStateChangedPredicate) Generic(event.GenericEvent) bool

+ func (DependencyStateChangedPredicate) Update(e event.UpdateEvent) bool

+ type MutatingAdmissionConfigurationChangedPredicate struct

+ func (MutatingAdmissionConfigurationChangedPredicate) Create(event.CreateEvent) bool

+ func (MutatingAdmissionConfigurationChangedPredicate) Delete(event.DeleteEvent) bool

+ func (MutatingAdmissionConfigurationChangedPredicate) Generic(event.GenericEvent) bool

+ func (MutatingAdmissionConfigurationChangedPredicate) Update(e event.UpdateEvent) bool

+ type NamespaceMetadataChangedPredicate struct

+ func (NamespaceMetadataChangedPredicate) Create(event.CreateEvent) bool

+ func (NamespaceMetadataChangedPredicate) Delete(event.DeleteEvent) bool

+ func (NamespaceMetadataChangedPredicate) Generic(event.GenericEvent) bool

+ func (NamespaceMetadataChangedPredicate) Update(e event.UpdateEvent) bool

+ type NamespaceTenantStateChangedPredicate struct

+ func (NamespaceTenantStateChangedPredicate) Create(event.CreateEvent) bool

+ func (NamespaceTenantStateChangedPredicate) Delete(event.DeleteEvent) bool

+ func (NamespaceTenantStateChangedPredicate) Generic(event.GenericEvent) bool

+ func (NamespaceTenantStateChangedPredicate) Update(e event.UpdateEvent) bool

+ type ObjectMetadataChangedPredicate struct

+ func (ObjectMetadataChangedPredicate) Create(event.CreateEvent) bool

+ func (ObjectMetadataChangedPredicate) Delete(event.DeleteEvent) bool

+ func (ObjectMetadataChangedPredicate) Generic(event.GenericEvent) bool

+ func (ObjectMetadataChangedPredicate) Update(e event.UpdateEvent) bool

+ type ProvisionerSubjectsChangedPredicate struct

+ func (ProvisionerSubjectsChangedPredicate) Create(event.CreateEvent) bool

+ func (ProvisionerSubjectsChangedPredicate) Delete(event.DeleteEvent) bool

+ func (ProvisionerSubjectsChangedPredicate) Generic(event.GenericEvent) bool

+ func (ProvisionerSubjectsChangedPredicate) Update(e event.UpdateEvent) bool

+ type QuantityLedgerWorkChangedPredicate struct

+ func (QuantityLedgerWorkChangedPredicate) Create(event.CreateEvent) bool

+ func (QuantityLedgerWorkChangedPredicate) Delete(event.DeleteEvent) bool

+ func (QuantityLedgerWorkChangedPredicate) Generic(event.GenericEvent) bool

+ func (QuantityLedgerWorkChangedPredicate) Update(e event.UpdateEvent) bool

+ type ResourcePoolNamespacesChangedPredicate struct

+ func (ResourcePoolNamespacesChangedPredicate) Create(event.CreateEvent) bool

+ func (ResourcePoolNamespacesChangedPredicate) Delete(event.DeleteEvent) bool

+ func (ResourcePoolNamespacesChangedPredicate) Generic(event.GenericEvent) bool

+ func (ResourcePoolNamespacesChangedPredicate) Update(e event.UpdateEvent) bool

+ type ResourceQuotaUsageChangedPredicate struct

+ func (ResourceQuotaUsageChangedPredicate) Create(event.CreateEvent) bool

+ func (ResourceQuotaUsageChangedPredicate) Delete(event.DeleteEvent) bool

+ func (ResourceQuotaUsageChangedPredicate) Generic(event.GenericEvent) bool

+ func (ResourceQuotaUsageChangedPredicate) Update(e event.UpdateEvent) bool

+ type TenantManagedResourceChangedPredicate struct

+ func (TenantManagedResourceChangedPredicate) Create(event.CreateEvent) bool

+ func (TenantManagedResourceChangedPredicate) Delete(event.DeleteEvent) bool

+ func (TenantManagedResourceChangedPredicate) Generic(event.GenericEvent) bool

+ func (TenantManagedResourceChangedPredicate) Update(e event.UpdateEvent) bool

+ type TenantNamespacesChangedPredicate struct

+ func (TenantNamespacesChangedPredicate) Create(event.CreateEvent) bool

+ func (TenantNamespacesChangedPredicate) Delete(event.DeleteEvent) bool

+ func (TenantNamespacesChangedPredicate) Generic(event.GenericEvent) bool

+ func (TenantNamespacesChangedPredicate) Update(e event.UpdateEvent) bool

+ type TenantPodOptionsChangedPredicate struct

+ func (TenantPodOptionsChangedPredicate) Create(event.CreateEvent) bool

+ func (TenantPodOptionsChangedPredicate) Delete(event.DeleteEvent) bool

+ func (TenantPodOptionsChangedPredicate) Generic(event.GenericEvent) bool

+ func (TenantPodOptionsChangedPredicate) Update(e event.UpdateEvent) bool

+ type TenantSelectionChangedPredicate struct

+ func (TenantSelectionChangedPredicate) Create(event.CreateEvent) bool

+ func (TenantSelectionChangedPredicate) Delete(event.DeleteEvent) bool

+ func (TenantSelectionChangedPredicate) Generic(event.GenericEvent) bool

+ func (TenantSelectionChangedPredicate) Update(e event.UpdateEvent) bool

+ type TenantServiceOptionsChangedPredicate struct

+ func (TenantServiceOptionsChangedPredicate) Create(event.CreateEvent) bool

+ func (TenantServiceOptionsChangedPredicate) Delete(event.DeleteEvent) bool

+ func (TenantServiceOptionsChangedPredicate) Generic(event.GenericEvent) bool

+ func (TenantServiceOptionsChangedPredicate) Update(e event.UpdateEvent) bool

+ type ValidatingAdmissionConfigurationChangedPredicate struct

+ func (ValidatingAdmissionConfigurationChangedPredicate) Create(event.CreateEvent) bool

+ func (ValidatingAdmissionConfigurationChangedPredicate) Delete(event.DeleteEvent) bool

+ func (ValidatingAdmissionConfigurationChangedPredicate) Generic(event.GenericEvent) bool

+ func (ValidatingAdmissionConfigurationChangedPredicate) Update(e event.UpdateEvent) bool

Jul 6, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Jul 3, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Jun 24, 2026 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule

  GO-2026-6157: Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) in github.com/projectcapsule/capsule

Jun 17, 2026 GO-2024-3077 +2 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule

  GO-2026-6157: Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) in github.com/projectcapsule/capsule

Jun 9, 2026 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

  GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule

  GO-2026-6157: Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) in github.com/projectcapsule/capsule

Jun 5, 2026 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

  GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule

  GO-2026-6157: Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) in github.com/projectcapsule/capsule

Jun 4, 2026 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

  GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule

  GO-2026-6157: Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) in github.com/projectcapsule/capsule

Jun 3, 2026 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

  GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule

  GO-2026-6157: Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) in github.com/projectcapsule/capsule

Changes in this version

+ type TenantCountChangedPredicate struct

+ func (TenantCountChangedPredicate) Create(event.CreateEvent) bool

+ func (TenantCountChangedPredicate) Delete(event.DeleteEvent) bool

+ func (TenantCountChangedPredicate) Generic(event.GenericEvent) bool

+ func (TenantCountChangedPredicate) Update(event.UpdateEvent) bool

May 29, 2026 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

  GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule

  GO-2026-6157: Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) in github.com/projectcapsule/capsule

May 28, 2026 GO-2024-3077 +3 more

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

  GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

  GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule

  GO-2026-6157: Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) in github.com/projectcapsule/capsule

Changes in this version

+ func LabelsChanged(keys []string, oldLabels, newLabels map[string]string) bool

+ func LabelsEqual(a, b map[string]string) bool

+ func LabelsMatching(match map[string]string) builder.Predicates

+ func NamesMatching(names ...string) builder.Predicates

+ type CapsuleConfigSpecAdministratorsChangedPredicate struct

+ func (CapsuleConfigSpecAdministratorsChangedPredicate) Create(event.CreateEvent) bool

+ func (CapsuleConfigSpecAdministratorsChangedPredicate) Delete(event.DeleteEvent) bool

+ func (CapsuleConfigSpecAdministratorsChangedPredicate) Generic(event.GenericEvent) bool

+ func (CapsuleConfigSpecAdministratorsChangedPredicate) Update(e event.UpdateEvent) bool

+ type CapsuleConfigSpecAdmissionChangedPredicate struct

+ func (CapsuleConfigSpecAdmissionChangedPredicate) Create(event.CreateEvent) bool

+ func (CapsuleConfigSpecAdmissionChangedPredicate) Delete(event.DeleteEvent) bool

+ func (CapsuleConfigSpecAdmissionChangedPredicate) Generic(event.GenericEvent) bool

+ func (CapsuleConfigSpecAdmissionChangedPredicate) Update(e event.UpdateEvent) bool

+ type CapsuleConfigSpecImpersonationChangedPredicate struct

+ func (CapsuleConfigSpecImpersonationChangedPredicate) Create(event.CreateEvent) bool

+ func (CapsuleConfigSpecImpersonationChangedPredicate) Delete(event.DeleteEvent) bool

+ func (CapsuleConfigSpecImpersonationChangedPredicate) Generic(event.GenericEvent) bool

+ func (CapsuleConfigSpecImpersonationChangedPredicate) Update(e event.UpdateEvent) bool

+ type LabelPresentPredicate struct

+ Label string

+ func (p LabelPresentPredicate) Create(e event.CreateEvent) bool

+ func (p LabelPresentPredicate) Delete(e event.DeleteEvent) bool

+ func (p LabelPresentPredicate) Generic(event.GenericEvent) bool

+ func (p LabelPresentPredicate) Update(e event.UpdateEvent) bool

+ type LabelsMatchingPredicate struct

+ Match map[string]string

+ func (p LabelsMatchingPredicate) Create(e event.CreateEvent) bool

+ func (p LabelsMatchingPredicate) Delete(e event.DeleteEvent) bool

+ func (p LabelsMatchingPredicate) Generic(e event.GenericEvent) bool

+ func (p LabelsMatchingPredicate) Update(e event.UpdateEvent) bool

+ type NamesMatchingPredicate struct

+ Names []string

+ func (p NamesMatchingPredicate) Create(e event.CreateEvent) bool

+ func (p NamesMatchingPredicate) Delete(e event.DeleteEvent) bool

+ func (p NamesMatchingPredicate) Generic(e event.GenericEvent) bool

+ func (p NamesMatchingPredicate) Update(e event.UpdateEvent) bool

+ type PromotedServiceaccountPredicate struct

+ func (PromotedServiceaccountPredicate) Create(e event.CreateEvent) bool

+ func (PromotedServiceaccountPredicate) Delete(e event.DeleteEvent) bool

+ func (PromotedServiceaccountPredicate) Generic(event.GenericEvent) bool

+ func (PromotedServiceaccountPredicate) Update(e event.UpdateEvent) bool

+ type ReconcileRequestedPredicate struct

+ func (ReconcileRequestedPredicate) Create(e event.CreateEvent) bool

+ func (ReconcileRequestedPredicate) Delete(e event.DeleteEvent) bool

+ func (ReconcileRequestedPredicate) Generic(e event.GenericEvent) bool

+ func (ReconcileRequestedPredicate) Update(e event.UpdateEvent) bool

+ type TenantStatusOwnersChangedPredicate struct

+ func (TenantStatusOwnersChangedPredicate) Create(event.CreateEvent) bool

+ func (TenantStatusOwnersChangedPredicate) Delete(event.DeleteEvent) bool

+ func (TenantStatusOwnersChangedPredicate) Generic(event.GenericEvent) bool

+ func (TenantStatusOwnersChangedPredicate) Update(e event.UpdateEvent) bool

+ type UpdatedLabelsPredicate struct

+ func (UpdatedLabelsPredicate) Create(event.CreateEvent) bool

+ func (UpdatedLabelsPredicate) Delete(event.DeleteEvent) bool

+ func (UpdatedLabelsPredicate) Generic(event.GenericEvent) bool

+ func (UpdatedLabelsPredicate) Update(e event.UpdateEvent) bool

+ type UpdatedMetadataPredicate struct

+ func (UpdatedMetadataPredicate) Create(event.CreateEvent) bool

+ func (UpdatedMetadataPredicate) Delete(event.DeleteEvent) bool

+ func (UpdatedMetadataPredicate) Generic(event.GenericEvent) bool

+ func (UpdatedMetadataPredicate) Update(e event.UpdateEvent) bool