Affected by GO-2025-3418 and 9 other vulnerabilities

GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

GO-2026-6003: Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

GO-2026-6005: Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

GO-2026-6006: Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

GO-2026-6007: Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

GO-2026-6008: Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

GO-2026-6009: Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

GO-2026-6011: Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

conformance

package

v1.2.3 Latest Latest Go to latest Published: Dec 2, 2024 License: Apache-2.0 Imports: 4 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/envoyproxy/gateway

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
type SupportLevel
- func GetFeatureSupportLevel(feature features.FeatureName) SupportLevel
- func GetTestSupportLevel(test suite.ConformanceTest) SupportLevel

Constants ¶

This section is empty.

Variables ¶

View Source

var EnvoyGatewaySuite = suite.ConformanceOptions{
	SupportedFeatures: allFeatures(),
	ExemptFeatures:    meshFeatures(),
	SkipTests:         skipTestsShortNames(SkipTests),
}

EnvoyGatewaySuite is the conformance suite configuration for the Gateway API.

View Source

var ExtendedFeatures = sets.New[features.FeatureName]()

ExtendedFeatures is a list of supported Gateway-API features that are considered Extended.

View Source

var SkipTests = []suite.ConformanceTest{
	tests.GatewayStaticAddresses,
	tests.GatewayInfrastructure,
}

SkipTests is a list of tests that are skipped in the conformance suite.

Functions ¶

This section is empty.

Types ¶

type SupportLevel ¶

type SupportLevel string

SupportLevel represents the level of support for a feature. See https://gateway-api.sigs.k8s.io/concepts/conformance/#2-support-levels.

const (
	// Core features are portable and expected to be supported by every implementation of Gateway-API.
	Core SupportLevel = "core"

	// Extended features are those that are portable but not universally supported across implementations.
	// Those implementations that support the feature will have the same behavior and semantics.
	// It is expected that some number of roadmap features will eventually migrate into the Core.
	Extended SupportLevel = "extended"
)

func GetFeatureSupportLevel ¶

func GetFeatureSupportLevel(feature features.FeatureName) SupportLevel

GetFeatureSupportLevel returns the SupportLevel for a feature.

func GetTestSupportLevel ¶

func GetTestSupportLevel(test suite.ConformanceTest) SupportLevel

GetTestSupportLevel returns the SupportLevel for a conformance test. The support level is determined by the highest support level of the features.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL