Affected by GO-2024-3077 and 5 other vulnerabilities

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule

GO-2026-6520: Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement in github.com/projectcapsule/capsule

webhook

package

v0.4.0 Latest Latest Go to latest Published: Nov 6, 2023 License: Apache-2.0 Imports: 7 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

func Register(manager controllerruntime.Manager, webhookList ...Webhook) error
type Func
type Handler
type Webhook

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func Register ¶

func Register(manager controllerruntime.Manager, webhookList ...Webhook) error

Types ¶

type Func ¶

type Func func(ctx context.Context, req admission.Request) *admission.Response

type Handler ¶

type Handler interface {
	OnCreate(client client.Client, decoder *admission.Decoder, recorder record.EventRecorder) Func
	OnDelete(client client.Client, decoder *admission.Decoder, recorder record.EventRecorder) Func
	OnUpdate(client client.Client, decoder *admission.Decoder, recorder record.EventRecorder) Func
}

type Webhook ¶

type Webhook interface {
	GetPath() string
	GetHandlers() []Handler
}

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
defaults
ingress
namespace
networkpolicy
node
ownerreference
pod
pvc
route
service
tenant
tenantresource
utils

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL