Affected by GO-2025-3418 and 9 other vulnerabilities

GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

GO-2026-6003: Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

GO-2026-6005: Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

GO-2026-6006: Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

GO-2026-6007: Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

GO-2026-6008: Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

GO-2026-6009: Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

GO-2026-6011: Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

kubernetes

package

v1.0.2 Latest Latest Go to latest Published: Jun 14, 2024 License: Apache-2.0 Imports: 44 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/envoyproxy/gateway

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
func CertsToSecret(namespace string, certs *crypto.Certificates) []corev1.Secret
func CreateOrUpdateSecrets(ctx context.Context, client client.Client, secrets []corev1.Secret, ...) ([]corev1.Secret, error)
type NamespaceGetter
type ObjectKindNamespacedName
type Provider
- func New(cfg *rest.Config, svr *config.Server, resources *message.ProviderResources) (*Provider, error)
- func (p *Provider) Start(ctx context.Context) error

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	ErrSecretExists = errors.New("skipped creating secret since it already exists")
)

Functions ¶

func CertsToSecret ¶

func CertsToSecret(namespace string, certs *crypto.Certificates) []corev1.Secret

CertsToSecret creates secrets in the provided namespace, in compact form, from the provided certs.

func CreateOrUpdateSecrets ¶

func CreateOrUpdateSecrets(ctx context.Context, client client.Client, secrets []corev1.Secret, update bool) ([]corev1.Secret, error)

CreateOrUpdateSecrets creates the provided secrets if they don't exist or updates them if they do.

Types ¶

type NamespaceGetter ¶ added in v0.6.0

type NamespaceGetter interface {
	GetNamespace() string
}

type ObjectKindNamespacedName ¶

type ObjectKindNamespacedName struct {
	// contains filtered or unexported fields
}

type Provider ¶

type Provider struct {
	// contains filtered or unexported fields
}

Provider is the scaffolding for the Kubernetes provider. It sets up dependencies and defines the topology of the provider and its managed components, wiring them together.

func New ¶

func New(cfg *rest.Config, svr *config.Server, resources *message.ProviderResources) (*Provider, error)

New creates a new Provider from the provided EnvoyGateway.

func (*Provider) Start ¶

func (p *Provider) Start(ctx context.Context) error

Start starts the Provider synchronously until a message is received from ctx.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
test

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL