GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

validation

package

v0.15.1 Latest Latest Go to latest Published: Oct 22, 2026 License: Apache-2.0 Imports: 23 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

func PodRules(regexCache *cache.RegexCache, registryCache *cache.RegistryRuleSetCache, ...) handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]
func TemplateRules(regex *cache.RegexCache, registries *cache.RegistryRuleSetCache, ...) handlers.TypedHandlerWithTenantWithRuleset[*unstructured.Unstructured]

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func PodRules ¶

func PodRules(
	regexCache *cache.RegexCache,
	registryCache *cache.RegistryRuleSetCache,
	compiler ruleengine.ConditionCompiler,
) handlers.TypedHandlerWithTenantWithRuleset[*corev1.Pod]

func TemplateRules ¶ added in v0.15.0

func TemplateRules(regex *cache.RegexCache, registries *cache.RegistryRuleSetCache, compiler ruleengine.ConditionCompiler) handlers.TypedHandlerWithTenantWithRuleset[*unstructured.Unstructured]

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL