Affected by GO-2024-3290 and 6 other vulnerabilities

GO-2024-3290: Cilium's Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in github.com/cilium/cilium

GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

GO-2025-3560: Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers in github.com/cilium/cilium

GO-2025-3561: Cilium node based network policies may incorrectly allow workload traffic in github.com/cilium/cilium

GO-2025-3635: In Cilium, packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

networkpolicy

package

v1.16.2 Latest Latest Go to latest Published: Sep 20, 2024 License: Apache-2.0 Imports: 15 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/cilium/cilium

Links

Documentation ¶

Index ¶

Variables
type Config
- func (def Config) Flags(flags *pflag.FlagSet)
type PolicyParams

Constants ¶

This section is empty.

Variables ¶

View Source

var Cell = cell.Module(
	"network-policy-validator",
	"Validates CNPs and CCNPs and reports their validity status",

	cell.Config(defaultConfig),
	cell.Invoke(registerPolicyValidator),
)

Functions ¶

This section is empty.

Types ¶

type Config ¶

type Config struct {
	ValidateNetworkPolicy bool `mapstructure:"validate-network-policy"`
}

func (Config) Flags ¶

func (def Config) Flags(flags *pflag.FlagSet)

type PolicyParams ¶

type PolicyParams struct {
	cell.In

	Logger       logrus.FieldLogger
	JobGroup     job.Group
	Clientset    k8s_client.Clientset
	DaemonConfig *option.DaemonConfig

	Cfg Config

	CNPResource  resource.Resource[*cilium_api_v2.CiliumNetworkPolicy]
	CCNPResource resource.Resource[*cilium_api_v2.CiliumClusterwideNetworkPolicy]
}

Source Files ¶

View all Source files

cell.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL