mutation

Sep 3, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Aug 31, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Aug 25, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Aug 25, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Aug 21, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Changes in this version

+ func MutatePodResources(pod *corev1.Pod, bodies []*apirules.NamespaceRuleBodyNamespace) (bool, error)

+ func MutateWorkloadResources(obj *unstructured.Unstructured, gvk schema.GroupVersionKind, ...) (bool, error)

Jul 28, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Jul 22, 2026 GO-2024-3077

  GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Changes in this version

+ const Path

+ func MetadataRules() handlers.TypedHandlerWithTenantWithRuleset[*unstructured.Unstructured]

+ func MutateMetadata(obj metav1.Object, gvk schema.GroupVersionKind, ...)

+ func Register(cfg configuration.Configuration) handlers.Webhook