Affected by GO-2026-4312 and 7 other vulnerabilities

GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

GO-2026-6003: Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

GO-2026-6005: Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

GO-2026-6006: Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

GO-2026-6007: Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

GO-2026-6008: Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

GO-2026-6009: Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

GO-2026-6011: Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

config

package

v1.3.2 Latest Latest Go to latest Published: Mar 24, 2025 License: Apache-2.0 Imports: 8 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/envoyproxy/gateway

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func Decode(cfgPath string) (*egv1a1.EnvoyGateway, error)
type Server
- func New() (*Server, error)
- func (s *Server) Validate() error

Constants ¶

View Source

const (
	// DefaultNamespace is the default namespace of Envoy Gateway.
	DefaultNamespace = "envoy-gateway-system"
	// DefaultDNSDomain is the default DNS domain used by k8s services.
	DefaultDNSDomain = "cluster.local"
	// EnvoyGatewayServiceName is the name of the Envoy Gateway service.
	EnvoyGatewayServiceName = "envoy-gateway"
	// EnvoyPrefix is the prefix applied to the Envoy ConfigMap, Service, Deployment, and ServiceAccount.
	EnvoyPrefix = "envoy"
)

Variables ¶

This section is empty.

Functions ¶

func Decode ¶

func Decode(cfgPath string) (*egv1a1.EnvoyGateway, error)

Types ¶

type Server ¶

type Server struct {
	// EnvoyGateway is the configuration used to startup Envoy Gateway.
	EnvoyGateway *egv1a1.EnvoyGateway
	// Namespace is the namespace that Envoy Gateway runs in.
	Namespace string
	// DNSDomain is the dns domain used by k8s services. Defaults to "cluster.local".
	DNSDomain string
	// Logger is the logr implementation used by Envoy Gateway.
	Logger logging.Logger
	// Elected chan is used to signal when an EG instance is elected as leader.
	Elected chan struct{}
}

Server wraps the EnvoyGateway configuration and additional parameters used by Envoy Gateway server.

func New ¶ added in v0.3.0

func New() (*Server, error)

New returns a Server with default parameters.

func (*Server) Validate ¶ added in v0.3.0

func (s *Server) Validate() error

Validate validates a Server config.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
loader

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL