nodeipamconfig

Feb 17, 2026 GO-2026-4856

  GO-2026-4856: Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic in github.com/cilium/cilium

Feb 3, 2026 GO-2026-4856

  GO-2026-4856: Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic in github.com/cilium/cilium

Changes in this version

+ const NodeSvcLBClass

+ const NodeSvcLBMatchLabelsAnnotation

+ var Cell = cell.Module("nodeipamconfig", "Node-IPAM-Config", ...)

+ type NodeIPAMConfig interface

+ IsEnabled func() bool