Affected by GO-2024-3077 and 1 other vulnerabilities

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

pod

package

v0.13.2 Latest Latest Go to latest Published: Jun 3, 2026 License: Apache-2.0 Imports: 21 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

func ContainerRegistry(configuration configuration.Configuration, cache *cache.RegistryRuleSetCache) handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]
func ContainerRegistryLegacy(configuration configuration.Configuration) handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]
func Handler(handler ...handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]) handlers.Handler
func ImagePullPolicy() handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]
func PriorityClass() handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]
func RuntimeClass() handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]
type PullPolicy
- func NewPullPolicy(tenant *capsulev1beta2.Tenant) PullPolicy
type Registry
- func NewRegistry(value string, cfg configuration.Configuration) Registry

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ContainerRegistry ¶

func ContainerRegistry(configuration configuration.Configuration, cache *cache.RegistryRuleSetCache) handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]

func ContainerRegistryLegacy ¶ added in v0.13.0

func ContainerRegistryLegacy(configuration configuration.Configuration) handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]

func Handler ¶

func Handler(handler ...handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]) handlers.Handler

func ImagePullPolicy ¶

func ImagePullPolicy() handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]

func PriorityClass ¶

func PriorityClass() handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]

func RuntimeClass ¶

func RuntimeClass() handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]

Types ¶

type PullPolicy ¶

type PullPolicy interface {
	IsPolicySupported(policy string) bool
	AllowedPullPolicies() []string
}

func NewPullPolicy ¶

func NewPullPolicy(tenant *capsulev1beta2.Tenant) PullPolicy

type Registry ¶

type Registry interface {
	Registry() string
	Repository() string
	Image() string
	Tag() string
	FQCI() string
}

func NewRegistry ¶

func NewRegistry(value string, cfg configuration.Configuration) Registry

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL