ssa

package

Versions in this module

v0

v0.15.2

Oct 26, 2026 GO-2024-3077

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

v0.15.1

Oct 22, 2026 GO-2024-3077

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

v0.15.0

Oct 21, 2026 GO-2024-3077

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

Changes in this version

+ const ConditionNotMet

+ func ReplicationOwnerCandidates(ctx context.Context, indexed client.Reader, prefix string) ([]client.Object, error)

+ func ReplicationOwnerPrefixes(target client.Object, departing string) map[string]struct

+ type ApplyOptions struct

+ Adopt bool

+ Condition string

+ DryRun bool

+ FieldOwner string

+ Force bool

+ OwnerReference *metav1.OwnerReference

+ PreviouslyCreated bool

+ Protect bool

+ type ApplyResult struct

+ Created bool

+ LastApply *metav1.Time

+ PolicyReconciled bool

+ Skipped bool

+ type Manager struct

+ Conditions celruntime.ResourceConditionCompiler

+ Mapper k8smeta.RESTMapper

+ Metadata Metadata

+ Reader client.Reader

+ ReplicationOwners ReplicationOwnerResolver

+ func (m Manager) Apply(ctx context.Context, c client.Client, obj *unstructured.Unstructured, ...) (ApplyResult, error)

+ func (m Manager) Disown(ctx context.Context, c client.Client, obj *unstructured.Unstructured, ...) error

+ func (m Manager) Orphan(ctx context.Context, c client.Client, obj *unstructured.Unstructured, ...) error

+ func (m Manager) Prune(ctx context.Context, c client.Client, obj *unstructured.Unstructured, ...) (deleted bool, err error)

+ func (m Manager) ResolveResourceID(obj *unstructured.Unstructured, tenant string, origin string) (gvk.ResourceID, bool, error)

+ type Metadata struct

+ AppManagedByValue string

+ CreatedByValue string

+ LegacyCreatedLabel string

+ ManagedByValue string

+ ProtectedByServiceAccount string

+ ProtectedByServiceAccountAnnotation string

+ ProtectedByValue string

+ ProtectionFieldOwnerPrefix string

+ type PruneOptions struct

+ FieldOwner string

+ OwnerReference *metav1.OwnerReference

+ PreviouslyCreated bool

+ type ReplicationOwnerResolver func(context.Context, *unstructured.Unstructured, string) (map[string]struct{}, error)

+ func NewReplicationOwnerResolver(indexed, reader client.Reader) ReplicationOwnerResolver

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL