GO-2022-1135: Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule

ingress

package

v0.1.0-rc5 Latest Latest Go to latest Published: Jul 21, 2021 License: Apache-2.0 Imports: 18 Imported by: 0

Details

This section is empty.

This section is empty.

func Class(configuration configuration.Configuration) capsulewebhook.Handler

func Collision(configuration configuration.Configuration) capsulewebhook.Handler

func Hostnames(configuration configuration.Configuration) capsulewebhook.Handler

func NewIngressClassForbidden(className string, spec capsulev1beta1.AllowedListSpec) error

func NewIngressClassNotValid(spec capsulev1beta1.AllowedListSpec) error

func NewIngressHostnameCollision(hostname string) error

func NewIngressHostnamesNotValid(invalidHostnames []string, notMatchingHostnames []string, spec capsulev1beta1.AllowedListSpec) error

type Extension struct {
	*extensionsv1beta1.Ingress
}

func (e Extension) Hostnames() []string

func (e Extension) IngressClass() (res *string)

func (e Extension) Name() string

func (e Extension) Namespace() string

type HostnamesList []string

func (hostnames HostnamesList) IsStringInList(value string) (ok bool)

func (hostnames HostnamesList) Len() int

func (hostnames HostnamesList) Less(i, j int) bool

func (hostnames HostnamesList) Swap(i, j int)

type Ingress interface {
	IngressClass() *string
	Namespace() string
	Name() string
	Hostnames() []string
}

type NetworkingV1 struct {
	*networkingv1.Ingress
}

func (n NetworkingV1) Hostnames() []string

func (n NetworkingV1) IngressClass() (res *string)

func (n NetworkingV1) Name() string

func (n NetworkingV1) Namespace() string

type NetworkingV1Beta1 struct {
	*networkingv1beta1.Ingress
}

func (n NetworkingV1Beta1) Hostnames() []string

func (n NetworkingV1Beta1) IngressClass() (res *string)

func (n NetworkingV1Beta1) Name() string

func (n NetworkingV1Beta1) Namespace() string