Affected by GO-2024-3077
and 2 other vulnerabilities
GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule
GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule
GO-2026-6157: Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) in github.com/projectcapsule/capsule
type AgeKeyPair struct {
// Identity is the private key, e.g. AGE-SECRET-KEY-1... Identity string `json:"identity" yaml:"identity"`
// Recipient is the public key, e.g. age1... Recipient string `json:"recipient" yaml:"recipient"`
}