Affected by GO-2024-3077 and 5 other vulnerabilities

GO-2024-3077: Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule

GO-2025-3893: Capsule tenant owners with "patch namespace" permission can hijack system namespaces label in github.com/projectcapsule/capsule

GO-2026-5043: Capsule Namespace Hijacking via subresource in github.com/projectcapsule/capsule

GO-2026-5584: Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

GO-2026-6155: Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests in github.com/projectcapsule/capsule

GO-2026-6520: Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement in github.com/projectcapsule/capsule

utils

package

v0.4.2 Latest Latest Go to latest Published: Nov 21, 2023 License: Apache-2.0 Imports: 14 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/projectcapsule/capsule

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func BuildNodeSelector(tnt *capsulev1beta2.Tenant, nsAnnotations map[string]string) map[string]string
func GetOwnersWithKinds(tenant *capsulev1beta2.Tenant) (owners []string)
func GetTypeLabel(t runtime.Object) (label string, err error)
func IsUnsupportedAPI(err error) bool
type UserGroupList
- func NewUserGroupList(groups []string) UserGroupList

Constants ¶

View Source

const (
	NodeSelectorAnnotation = "scheduler.alpha.kubernetes.io/node-selector"
)

Variables ¶

This section is empty.

Functions ¶

func BuildNodeSelector ¶

func BuildNodeSelector(tnt *capsulev1beta2.Tenant, nsAnnotations map[string]string) map[string]string

func GetOwnersWithKinds ¶

func GetOwnersWithKinds(tenant *capsulev1beta2.Tenant) (owners []string)

func GetTypeLabel ¶

func GetTypeLabel(t runtime.Object) (label string, err error)

func IsUnsupportedAPI ¶

func IsUnsupportedAPI(err error) bool

Types ¶

type UserGroupList ¶

type UserGroupList interface {
	Find(needle string) (found bool)
}

func NewUserGroupList ¶

func NewUserGroupList(groups []string) UserGroupList

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL