GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

invalidator

package

v0.15.1 Latest Latest Go to latest Published: Oct 22, 2026 License: Apache-2.0 Imports: 31 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

type CacheInvalidator

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type CacheInvalidator ¶

type CacheInvalidator struct {
	client.Client

	Rest *rest.Config
	Log  logr.Logger

	Configuration configuration.Configuration

	RegistryCache      *cache.RegistryRuleSetCache
	TargetsCache       *cache.CompiledTargetsCache[string]
	JSONPathCache      *cache.JSONPathCache
	CELCache           *cache.CELCache
	ImpersonationCache *cache.ImpersonationCache
	RegexCache         *cache.RegexCache
	// contains filtered or unexported fields
}

func (*CacheInvalidator) NeedLeaderElection ¶

func (r *CacheInvalidator) NeedLeaderElection() bool

func (*CacheInvalidator) Reconcile ¶

func (r *CacheInvalidator) Reconcile(ctx context.Context, request reconcile.Request) (res reconcile.Result, err error)

func (*CacheInvalidator) SetupWithManager ¶

func (r *CacheInvalidator) SetupWithManager(
	mgr ctrl.Manager,
	ctrlConfig utils.ControllerOptions,
	metrics *metrics.ConfigRecorder,
) (err error)

func (*CacheInvalidator) Start ¶

func (r *CacheInvalidator) Start(ctx context.Context) error

Start is the Runnable function triggered upon Manager start-up to perform cache population.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL