v1alpha1

package

Go to main page

Versions in this module

v0

v0.3.3

Jun 27, 2023

v0.3.2

Jun 1, 2023

v0.3.1

Mar 28, 2023

v0.3.0

Mar 4, 2023

v0.2.2

Feb 17, 2023

v0.2.1

Feb 1, 2023

v0.2.0

Jan 28, 2023

Changes in this version

type AdditionalMetadata

+ Annotations map[string]string

+ Labels map[string]string

type CapsuleConfiguration

+ func (in *CapsuleConfiguration) Hub()

+ func (in *CapsuleConfiguration) SetupWebhookWithManager(mgr ctrl.Manager) error

v0.1.3

Dec 2, 2022

v0.1.2

Jul 26, 2022 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

Changes in this version

+ const EnableTLSConfigurationAnnotationName

+ const MutatingWebhookConfigurationName

+ const TLSSecretNameAnnotation

+ const ValidatingWebhookConfigurationName

v0.1.2-rc1

Jun 29, 2022 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.1.2-rc0

May 23, 2022 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.1.1

Jan 11, 2022 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

Changes in this version

+ const ForbiddenNodeAnnotationsAnnotation

+ const ForbiddenNodeAnnotationsRegexpAnnotation

+ const ForbiddenNodeLabelsAnnotation

+ const ForbiddenNodeLabelsRegexpAnnotation

v0.1.1-rc1

Nov 12, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.1.1-rc0

Sep 23, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.1.0

Aug 23, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

Changes in this version

+ type AdditionalMetadataSpec struct

+ AdditionalAnnotations map[string]string

+ AdditionalLabels map[string]string

+ func (in *AdditionalMetadataSpec) DeepCopy() *AdditionalMetadataSpec

+ func (in *AdditionalMetadataSpec) DeepCopyInto(out *AdditionalMetadataSpec)

+ type AdditionalRoleBindingsSpec struct

+ ClusterRoleName string

+ Subjects []rbacv1.Subject

+ func (in *AdditionalRoleBindingsSpec) DeepCopy() *AdditionalRoleBindingsSpec

+ func (in *AdditionalRoleBindingsSpec) DeepCopyInto(out *AdditionalRoleBindingsSpec)

+ type CapsuleConfiguration struct

+ Spec CapsuleConfigurationSpec

+ func (in *CapsuleConfiguration) DeepCopy() *CapsuleConfiguration

+ func (in *CapsuleConfiguration) DeepCopyInto(out *CapsuleConfiguration)

+ func (in *CapsuleConfiguration) DeepCopyObject() runtime.Object

+ type CapsuleConfigurationList struct

+ Items []CapsuleConfiguration

+ func (in *CapsuleConfigurationList) DeepCopy() *CapsuleConfigurationList

+ func (in *CapsuleConfigurationList) DeepCopyInto(out *CapsuleConfigurationList)

+ func (in *CapsuleConfigurationList) DeepCopyObject() runtime.Object

+ type CapsuleConfigurationSpec struct

+ ForceTenantPrefix bool

+ ProtectedNamespaceRegexpString string

+ UserGroups []string

+ func (in *CapsuleConfigurationSpec) DeepCopy() *CapsuleConfigurationSpec

+ func (in *CapsuleConfigurationSpec) DeepCopyInto(out *CapsuleConfigurationSpec)

+ type ExternalServiceIPsSpec struct

+ Allowed []AllowedIP

+ func (in *ExternalServiceIPsSpec) DeepCopy() *ExternalServiceIPsSpec

+ func (in *ExternalServiceIPsSpec) DeepCopyInto(out *ExternalServiceIPsSpec)

type Tenant

+ func (t *Tenant) ConvertFrom(srcRaw conversion.Hub) error

+ func (t *Tenant) ConvertTo(dstRaw conversion.Hub) error

+ func (t *Tenant) IsCordoned() bool

+ func (t *Tenant) SetupWebhookWithManager(mgr ctrl.Manager) error

v0.1.0-rc6

Aug 12, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.1.0-rc5

Jul 21, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.1.0-rc4

Jul 20, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.1.0-rc3

Jul 12, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.1.0-rc2

Jun 25, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.1.0-rc1

May 31, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.0.5

Mar 17, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.0.5-rc2

Mar 6, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.0.5-rc1

Jan 21, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.0.4

Jan 13, 2021 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

Changes in this version

+ const AllowedRegistriesAnnotation

+ const AllowedRegistriesRegexpAnnotation

+ func HardQuotaFor(resource fmt.Stringer) string

+ type AllowedIP string

+ type AllowedListSpec struct

+ Exact []string

+ Regex string

+ func (in *AllowedListSpec) DeepCopy() *AllowedListSpec

+ func (in *AllowedListSpec) DeepCopyInto(out *AllowedListSpec)

+ func (in *AllowedListSpec) ExactMatch(value string) (ok bool)

+ func (in AllowedListSpec) RegexMatch(value string) (ok bool)

+ type ExternalServiceIPs struct

+ Allowed []AllowedIP

+ func (in *ExternalServiceIPs) DeepCopy() *ExternalServiceIPs

+ func (in *ExternalServiceIPs) DeepCopyInto(out *ExternalServiceIPs)

+ type IngressHostnamesList []string

+ func (hostnames IngressHostnamesList) IsStringInList(value string) (ok bool)

+ func (hostnames IngressHostnamesList) Len() int

+ func (hostnames IngressHostnamesList) Less(i, j int) bool

+ func (hostnames IngressHostnamesList) Swap(i, j int)

+ func (in IngressHostnamesList) DeepCopy() IngressHostnamesList

+ func (in IngressHostnamesList) DeepCopyInto(out *IngressHostnamesList)

+ type IngressHostnamesSpec struct

+ Allowed IngressHostnamesList

+ AllowedRegex string

+ func (in *IngressHostnamesSpec) DeepCopy() *IngressHostnamesSpec

+ func (in *IngressHostnamesSpec) DeepCopyInto(out *IngressHostnamesSpec)

type TenantSpec

+ ExternalServiceIPs *ExternalServiceIPs

+ IngressHostnames *AllowedListSpec

v0.0.3

Nov 25, 2020 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

Changes in this version

+ type AdditionalRoleBindings struct

+ ClusterRoleName string

+ Subjects []rbacv1.Subject

+ func (in *AdditionalRoleBindings) DeepCopy() *AdditionalRoleBindings

+ func (in *AdditionalRoleBindings) DeepCopyInto(out *AdditionalRoleBindings)

+ type ContainerRegistriesSpec struct

+ Allowed RegistryList

+ AllowedRegex string

+ func (in *ContainerRegistriesSpec) DeepCopy() *ContainerRegistriesSpec

+ func (in *ContainerRegistriesSpec) DeepCopyInto(out *ContainerRegistriesSpec)

+ type RegistryList []string

+ func (in RegistryList) DeepCopy() RegistryList

+ func (in RegistryList) DeepCopyInto(out *RegistryList)

+ func (in RegistryList) IsStringInList(value string) (ok bool)

+ func (in RegistryList) Len() int

+ func (in RegistryList) Less(i, j int) bool

+ func (in RegistryList) Swap(i, j int)

type TenantSpec

+ AdditionalRoleBindings []AdditionalRoleBindings

+ ContainerRegistries *ContainerRegistriesSpec

v0.0.2

Nov 10, 2020 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

v0.0.1

Sep 16, 2020 GO-2022-1135

GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

Changes in this version

+ const AvailableIngressClassesAnnotation

+ const AvailableIngressClassesRegexpAnnotation

+ const AvailableStorageClassesAnnotation

+ const AvailableStorageClassesRegexpAnnotation

+ var AddToScheme = SchemeBuilder.AddToScheme

+ var GroupVersion = schema.GroupVersion

+ var SchemeBuilder = &scheme.Builder

+ func GetTypeLabel(t runtime.Object) (label string, err error)

+ func UsedQuotaFor(resource corev1.ResourceName) string

+ type AdditionalMetadata struct

+ AdditionalAnnotations map[string]string

+ AdditionalLabels map[string]string

+ func (in *AdditionalMetadata) DeepCopy() *AdditionalMetadata

+ func (in *AdditionalMetadata) DeepCopyInto(out *AdditionalMetadata)

+ type IngressClassList []string

+ func (in IngressClassList) DeepCopy() IngressClassList

+ func (in IngressClassList) DeepCopyInto(out *IngressClassList)

+ func (n IngressClassList) IsStringInList(value string) (ok bool)

+ func (n IngressClassList) Len() int

+ func (n IngressClassList) Less(i, j int) bool

+ func (n IngressClassList) Swap(i, j int)

+ type IngressClassesSpec struct

+ Allowed IngressClassList

+ AllowedRegex string

+ func (in *IngressClassesSpec) DeepCopy() *IngressClassesSpec

+ func (in *IngressClassesSpec) DeepCopyInto(out *IngressClassesSpec)

+ type Kind string

+ func (k Kind) String() string

+ type NamespaceList []string

+ func (in NamespaceList) DeepCopy() NamespaceList

+ func (in NamespaceList) DeepCopyInto(out *NamespaceList)

+ func (n NamespaceList) IsStringInList(value string) (ok bool)

+ func (n NamespaceList) Len() int

+ func (n NamespaceList) Less(i, j int) bool

+ func (n NamespaceList) Swap(i, j int)

+ type NamespaceQuota uint

+ type OwnerSpec struct

+ Kind Kind

+ Name string

+ func (in *OwnerSpec) DeepCopy() *OwnerSpec

+ func (in *OwnerSpec) DeepCopyInto(out *OwnerSpec)

+ type StorageClassList []string

+ func (in StorageClassList) DeepCopy() StorageClassList

+ func (in StorageClassList) DeepCopyInto(out *StorageClassList)

+ func (n StorageClassList) IsStringInList(value string) (ok bool)

+ func (n StorageClassList) Len() int

+ func (n StorageClassList) Less(i, j int) bool

+ func (n StorageClassList) Swap(i, j int)

+ type StorageClassesSpec struct

+ Allowed StorageClassList

+ AllowedRegex string

+ func (in *StorageClassesSpec) DeepCopy() *StorageClassesSpec

+ func (in *StorageClassesSpec) DeepCopyInto(out *StorageClassesSpec)

+ type Tenant struct

+ Spec TenantSpec

+ Status TenantStatus

+ func (in *Tenant) DeepCopy() *Tenant

+ func (in *Tenant) DeepCopyInto(out *Tenant)

+ func (in *Tenant) DeepCopyObject() runtime.Object

+ func (t *Tenant) AssignNamespaces(namespaces []corev1.Namespace)

+ func (t *Tenant) IsFull() bool

+ type TenantList struct

+ Items []Tenant

+ func (in *TenantList) DeepCopy() *TenantList

+ func (in *TenantList) DeepCopyInto(out *TenantList)

+ func (in *TenantList) DeepCopyObject() runtime.Object

+ type TenantSpec struct

+ IngressClasses IngressClassesSpec

+ LimitRanges []corev1.LimitRangeSpec

+ NamespaceQuota NamespaceQuota

+ NamespacesMetadata AdditionalMetadata

+ NetworkPolicies []networkingv1.NetworkPolicySpec

+ NodeSelector map[string]string

+ Owner OwnerSpec

+ ResourceQuota []corev1.ResourceQuotaSpec

+ ServicesMetadata AdditionalMetadata

+ StorageClasses StorageClassesSpec

+ func (in *TenantSpec) DeepCopy() *TenantSpec

+ func (in *TenantSpec) DeepCopyInto(out *TenantSpec)

+ type TenantStatus struct

+ Groups []string

+ Namespaces NamespaceList

+ Size uint

+ Users []string

+ func (in *TenantStatus) DeepCopy() *TenantStatus

+ func (in *TenantStatus) DeepCopyInto(out *TenantStatus)

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL