Affected by GO-2024-3077 and 1 other vulnerabilities

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

GO-2026-5406: Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected in github.com/projectcapsule/capsule

utils

package

v0.13.4 Latest Latest Go to latest Published: Jun 5, 2026 License: Apache-2.0 Imports: 24 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func BuildNodeSelector(tnt *capsulev1beta2.Tenant, nsAnnotations map[string]string) map[string]string
func CompileFieldSelector(cache *cache.JSONPathCache, raw string) (selectors.CompiledFieldSelector, error)
func GetK8sVersionFromConfig(dc discovery.DiscoveryInterface) (*version.Version, error)
func GetTypeLabel(t runtime.Object) (label string, err error)
func IgnoreWrappedNotFound(err error) error
func IsNamespaceSelectedBySelector(ns *corev1.Namespace, selector *metav1.LabelSelector) (bool, error)
func IsUnsupportedAPI(err error) bool
func MapEqual(a, b map[string]string) bool
func MapMergeNoOverrite(dst, src map[string]string)
func Mapify(data any) map[string]any
func NodeWebhookSupported(currentVersion *version.Version) (bool, error)
func RoleBindingHashFunc(binding rbac.AdditionalRoleBindingsSpec) string
func ToUnstructuredMap(obj any) (map[string]any, error)

Constants ¶

View Source

const (
	NodeSelectorAnnotation = "scheduler.alpha.kubernetes.io/node-selector"
)

Variables ¶

This section is empty.

Functions ¶

func BuildNodeSelector ¶

func BuildNodeSelector(tnt *capsulev1beta2.Tenant, nsAnnotations map[string]string) map[string]string

func CompileFieldSelector ¶ added in v0.13.4

func CompileFieldSelector(
	cache *cache.JSONPathCache,
	raw string,
) (selectors.CompiledFieldSelector, error)

func GetK8sVersionFromConfig ¶ added in v0.13.0

func GetK8sVersionFromConfig(dc discovery.DiscoveryInterface) (*version.Version, error)

func GetTypeLabel ¶

func GetTypeLabel(t runtime.Object) (label string, err error)

func IgnoreWrappedNotFound ¶ added in v0.13.0

func IgnoreWrappedNotFound(err error) error

func IsNamespaceSelectedBySelector ¶ added in v0.9.0

func IsNamespaceSelectedBySelector(ns *corev1.Namespace, selector *metav1.LabelSelector) (bool, error)

func IsUnsupportedAPI ¶

func IsUnsupportedAPI(err error) bool

func MapEqual ¶ added in v0.13.0

func MapEqual(a, b map[string]string) bool

func MapMergeNoOverrite ¶ added in v0.11.0

func MapMergeNoOverrite(dst, src map[string]string)

func Mapify ¶ added in v0.13.0

func Mapify(data any) map[string]any

func NodeWebhookSupported ¶ added in v0.13.0

func NodeWebhookSupported(currentVersion *version.Version) (bool, error)

func RoleBindingHashFunc ¶ added in v0.13.0

func RoleBindingHashFunc(binding rbac.AdditionalRoleBindingsSpec) string

func ToUnstructuredMap ¶ added in v0.13.0

func ToUnstructuredMap(obj any) (map[string]any, error)

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL