GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

tls

package

v0.14.0 Latest Latest Go to latest Published: Aug 21, 2026 License: Apache-2.0 Imports: 28 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

func FetchCurrentCaBundleForAdmission(ctx context.Context, c client.Reader, cfg configuration.Configuration) ([]byte, error)
func WebhookCertificateReadinessCheck(reader client.Reader, cfg configuration.Configuration, namespace string, ...) healthz.Checker
type ManagedCRD
type Reconciler

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func FetchCurrentCaBundleForAdmission ¶ added in v0.13.2

func FetchCurrentCaBundleForAdmission(
	ctx context.Context,
	c client.Reader,
	cfg configuration.Configuration,
) ([]byte, error)

func WebhookCertificateReadinessCheck ¶ added in v0.14.0

func WebhookCertificateReadinessCheck(
	reader client.Reader,
	cfg configuration.Configuration,
	namespace string,
	getCertificate certificateGetter,
) healthz.Checker

WebhookCertificateReadinessCheck prevents a webhook Pod from becoming ready while the certificate it is actually serving is not trusted by an admission configuration managed by Capsule. This closes the window between Secret publication, certwatcher reload, and caBundle reconciliation.

Types ¶

type ManagedCRD ¶ added in v0.13.0

type ManagedCRD struct {
	Name                     string
	ManageConversion         bool
	ConversionPath           string
	ConversionReviewVersions []string
}

type Reconciler ¶

type Reconciler struct {
	client.Client

	Log           logr.Logger
	Scheme        *runtime.Scheme
	Namespace     string
	Configuration configuration.Configuration
}

func (*Reconciler) Reconcile ¶

func (r *Reconciler) Reconcile(ctx context.Context, request ctrl.Request) (ctrl.Result, error)

func (*Reconciler) ReconcileCertificates ¶

func (r *Reconciler) ReconcileCertificates(
	ctx context.Context,
	log logr.Logger,
	certSecret *corev1.Secret,
) error

func (*Reconciler) SetupWithManager ¶

func (r *Reconciler) SetupWithManager(mgr ctrl.Manager, ctrlConfig utils.ControllerOptions) error

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL