GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

quota

package

v0.13.11 Latest Latest Go to latest Published: Jul 28, 2026 License: Apache-2.0 Imports: 7 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

func ClampQuantityToZero(q *resource.Quantity)
func ConditionsMatch(u unstructured.Unstructured, conditions []*jsonpath.CompiledJSONPath) (bool, error)
func MakeCustomQuotaCacheKey(namespace, name string) string
func MakeGlobalCustomQuotaCacheKey(name string) string
func NegateQuantity(in resource.Quantity) resource.Quantity
func ParseBoolFromUnstructured(u unstructured.Unstructured, compiled *jsonpath.CompiledJSONPath) (bool, error)
func ParseQuantities(value string) (resource.Quantity, error)
func ParseQuantityFromUnstructured(u unstructured.Unstructured, compiled *jsonpath.CompiledJSONPath) (resource.Quantity, error)
func ParseUsageFromUnstructured(u unstructured.Unstructured, compiled *jsonpath.CompiledJSONPath) (string, error)
func QuantityEqual(a, b resource.Quantity) bool
func ValidateQuantity(q resource.Quantity) error
type MatchedQuota
type Operation

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ClampQuantityToZero ¶

func ClampQuantityToZero(q *resource.Quantity)

func ConditionsMatch ¶

func ConditionsMatch(u unstructured.Unstructured, conditions []*jsonpath.CompiledJSONPath) (bool, error)

func MakeCustomQuotaCacheKey ¶

func MakeCustomQuotaCacheKey(namespace, name string) string

func MakeGlobalCustomQuotaCacheKey ¶

func MakeGlobalCustomQuotaCacheKey(name string) string

func NegateQuantity ¶

func NegateQuantity(in resource.Quantity) resource.Quantity

func ParseBoolFromUnstructured ¶

func ParseBoolFromUnstructured(u unstructured.Unstructured, compiled *jsonpath.CompiledJSONPath) (bool, error)

func ParseQuantities ¶

func ParseQuantities(value string) (resource.Quantity, error)

func ParseQuantityFromUnstructured ¶

func ParseQuantityFromUnstructured(u unstructured.Unstructured, compiled *jsonpath.CompiledJSONPath) (resource.Quantity, error)

func ParseUsageFromUnstructured ¶

func ParseUsageFromUnstructured(u unstructured.Unstructured, compiled *jsonpath.CompiledJSONPath) (string, error)

GetUsageFromUnstructured extracts a value from an unstructured object using a JSONPath source path. It is convenient for one-off calls. For repeated calls with the same sourcePath, prefer CompileUsageJSONPath(...) and then Execute(...) to avoid reparsing.

func QuantityEqual ¶ added in v0.13.5

func QuantityEqual(a, b resource.Quantity) bool

func ValidateQuantity ¶

func ValidateQuantity(q resource.Quantity) error

Types ¶

type MatchedQuota ¶

type MatchedQuota struct {
	Key          string
	Name         string
	Namespace    string
	Path         string
	CompiledPath *jsonpath.CompiledJSONPath
	CEL          string
	CompiledCEL  *celruntime.CompiledExpression
	Operation    Operation
	Limit        resource.Quantity
	Used         resource.Quantity
	IsGlobal     bool
	SourceRank   int
}

Overlay for Global/Namespace CustomQuotas.

type Operation ¶

type Operation string

+kubebuilder:validation:Enum=add;sub;count

const (
	OpAdd   Operation = "add"
	OpSub   Operation = "sub"
	OpCount Operation = "count"
)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL