ruleengine

package

Versions in this module

v0

v0.13.9

Jul 6, 2026 GO-2024-3077

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

v0.13.8

Jul 3, 2026 GO-2024-3077

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

v0.13.7

Jun 24, 2026 GO-2024-3077

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Changes in this version

+ func EnforceBodiesFromNamespaceRules(bodies []*api.NamespaceRuleBodyNamespace) []*api.NamespaceRuleEnforceBody

+ func ValidateRuleStatusBody(bodies []*rules.NamespaceRuleBodyNamespace) error

+ type Decision struct

+ Action api.ActionType

+ EventReason string

+ MatchDetail string

+ MatchedRule string

+ MatchedValue any

+ Message string

+ SetName string

+ Value Value

+ type DecisionError struct

+ Decision *Decision

+ func (e *DecisionError) Error() string

+ type Evaluation struct

+ Audits []*Decision

+ Blocking *Decision

+ Final *Decision

+ func EvaluateEnforce[R any, T any](obj T, enforceBodies []*api.NamespaceRuleEnforceBody, set Set[R, T]) (*Evaluation, error)

+ func (e *Evaluation) Append(other *Evaluation)

+ func (e *Evaluation) BlockingError() error

+ type Match struct

+ Detail string

+ Matched bool

+ MatchedValue any

+ type Set struct

+ AllowedDescription string

+ EventReason string

+ Matches func(R, Value) (Match, error)

+ Message func(api.ActionType, Value, any) string

+ Name string

+ RuleDescription func(R) string

+ Rules func(*api.NamespaceRuleEnforceBody) []R

+ Values func(O) []Value

+ type Value struct

+ Path string

+ Value string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL