Affected by GO-2026-6003 and 6 other vulnerabilities

GO-2026-6003: Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

GO-2026-6005: Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

GO-2026-6006: Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

GO-2026-6007: Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

GO-2026-6008: Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

GO-2026-6009: Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

GO-2026-6011: Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

bootstrap

package

v1.5.7 Latest Latest Go to latest Published: Jan 12, 2026 License: Apache-2.0 Imports: 19 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/envoyproxy/gateway

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func ApplyBootstrapConfig(boostrapConfig *egv1a1.ProxyBootstrap, defaultBootstrap string) (string, error)
func GetRenderedBootstrapConfig(opts *RenderBootstrapConfigOptions) (string, error)
func Validate(boostrapConfig *egv1a1.ProxyBootstrap) error
type RenderBootstrapConfigOptions
type SdsConfigPath
type StatsMatcherParameters

Constants ¶

View Source

const (

	// EnvoyAdminAddress is the listening v4 address of the envoy admin interface.
	EnvoyAdminAddress   = "127.0.0.1"
	EnvoyAdminAddressV6 = "::1"
	// EnvoyAdminPort is the port used to expose admin interface.
	EnvoyAdminPort = 19000

	// DefaultXdsServerPort is the default listening port of the xds-server.
	DefaultXdsServerPort = 18000

	EnvoyStatsPort = 19001

	EnvoyReadinessPort = 19003
	EnvoyReadinessPath = "/ready"
)

Variables ¶

This section is empty.

Functions ¶

func ApplyBootstrapConfig ¶ added in v0.6.0

func ApplyBootstrapConfig(boostrapConfig *egv1a1.ProxyBootstrap, defaultBootstrap string) (string, error)

ApplyBootstrapConfig applies the bootstrap config to the default bootstrap config and return the result config. The defaultBootstrap is expected to be a YAML string

func GetRenderedBootstrapConfig ¶

func GetRenderedBootstrapConfig(opts *RenderBootstrapConfigOptions) (string, error)

GetRenderedBootstrapConfig renders the bootstrap YAML string

func Validate ¶ added in v1.2.0

func Validate(boostrapConfig *egv1a1.ProxyBootstrap) error

Validate ensures that after applying the provided bootstrap configuration, the resulting bootstrap is still OK. This code previously was part of the validate logic in api/v1alpha1/validate, but was moved here to prevent code in the api packages from accessing code from the internal packages.

Types ¶

type RenderBootstrapConfigOptions ¶ added in v1.1.0

type RenderBootstrapConfigOptions struct {
	IPFamily                 *egv1a1.IPFamily
	ProxyMetrics             *egv1a1.ProxyMetrics
	SdsConfig                SdsConfigPath
	ServiceClusterName       *string
	XdsServerHost            *string
	XdsServerPort            *int32
	AdminServerPort          *int32
	StatsServerPort          *int32
	MaxHeapSizeBytes         uint64
	GatewayNamespaceMode     bool
	TopologyInjectorDisabled bool
	ServiceAccountTokenPath  string
}

type SdsConfigPath ¶ added in v1.2.0

type SdsConfigPath struct {
	Certificate string
	TrustedCA   string
	// ServiceAccountToken is the path to the service account token file used for authentication in GatewayNamespaceMode.
	ServiceAccountToken string
}

type StatsMatcherParameters ¶ added in v0.6.0

type StatsMatcherParameters struct {
	Exacts             []string
	Prefixes           []string
	Suffixes           []string
	RegularExpressions []string
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL