GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

test

package

v0.15.0 Latest Latest Go to latest Published: Oct 21, 2026 License: Apache-2.0 Imports: 5 Imported by: 0

Details

This section is empty.

This section is empty.

func VerifyResponse(tb testing.TB, response *admission.Response, status int32, message string)

VerifyResponse is a helper function to verify the response of a webhook function.

type Decoder[T interface {
	runtime.Object
	DeepCopyInto(T)
}] struct {
	Object    T
	OldObject T
}

func (d *Decoder[T]) Decode(_ admission.Request, into runtime.Object) error

func (d *Decoder[T]) DecodeRaw(_ runtime.RawExtension, into runtime.Object) error