gatewayapi

Feb 5, 2026

Changes in this version

+ const CACertKey

+ const CRLKey

+ const JWKSConfigMapKey

+ const LuaConfigMapKey

+ const ResponseBodyConfigMapKey

type HTTPFilterIR

+ Matches []egv1a1.HTTPRouteMatchFilter

type ListenerContext

+ func (l *ListenerContext) GetNamespace() string

type Translator

+ func (t *Translator) ProcessXListenerSetStatus(xListenerSets []*gwapixv1a1.XListenerSet)

+ func (t *Translator) ProcessXListenerSets(xListenerSets []*gwapixv1a1.XListenerSet, gateways []*GatewayContext)

+ type TranslatorContext struct

+ BackendMap map[types.NamespacedName]*egv1a1.Backend

+ ClusterTrustBundleMap map[types.NamespacedName]*certificatesv1b1.ClusterTrustBundle

+ ConfigMapMap map[types.NamespacedName]*corev1.ConfigMap

+ EndpointSliceMap map[backendServiceKey][]*discoveryv1.EndpointSlice

+ NamespaceMap map[types.NamespacedName]*corev1.Namespace

+ SecretMap map[types.NamespacedName]*corev1.Secret

+ ServiceImportMap map[types.NamespacedName]*mcsapiv1a1.ServiceImport

+ ServiceMap map[types.NamespacedName]*corev1.Service

+ func (t *TranslatorContext) GetBackend(namespace, name string) *egv1a1.Backend

+ func (t *TranslatorContext) GetClusterTrustBundle(name string) *certificatesv1b1.ClusterTrustBundle

+ func (t *TranslatorContext) GetConfigMap(namespace, name string) *corev1.ConfigMap

+ func (t *TranslatorContext) GetEndpointSlicesForBackend(svcNamespace, svcName, backendKind string) []*discoveryv1.EndpointSlice

+ func (t *TranslatorContext) GetNamespace(name string) *corev1.Namespace

+ func (t *TranslatorContext) GetSecret(namespace, name string) *corev1.Secret

+ func (t *TranslatorContext) GetService(namespace, name string) *corev1.Service

+ func (t *TranslatorContext) GetServiceImport(namespace, name string) *mcsapiv1a1.ServiceImport

+ func (t *TranslatorContext) SetBackends(backends []*egv1a1.Backend)

+ func (t *TranslatorContext) SetClusterTrustBundles(ctbs []*certificatesv1b1.ClusterTrustBundle)

+ func (t *TranslatorContext) SetConfigMaps(configMaps []*corev1.ConfigMap)

+ func (t *TranslatorContext) SetEndpointSlicesForBackend(slices []*discoveryv1.EndpointSlice)

+ func (t *TranslatorContext) SetNamespaces(namespaces []*corev1.Namespace)

+ func (t *TranslatorContext) SetSecrets(secrets []*corev1.Secret)

+ func (t *TranslatorContext) SetServiceImports(svcImps []*mcsapiv1a1.ServiceImport)

+ func (t *TranslatorContext) SetServices(svcs []*corev1.Service)

Feb 11, 2026

Changes in this version

+ var ErrBackendTLSPolicyNoValidCACertificate = fmt.Errorf("no valid CA certificate found in referenced resources")

Dec 5, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 10, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ var ErrBackendTLSPolicyInvalidKind = fmt.Errorf("no CA bundle found in referenced ConfigMap, Secret, or ClusterTrustBundle")

+ type GatewayPolicyRouteMap struct

+ Routes map[NamespacedNameWithSection]sets.Set[string]

+ SectionIndex map[types.NamespacedName]sets.Set[string]

+ type NamespacedNameWithSection struct

type Translator

+ Logger logging.Logger

+ RunningOnHost bool

Oct 31, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Oct 27, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jan 12, 2026

Changes in this version

type Translator

+ LuaEnvoyExtensionPolicyDisabled bool

Dec 5, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 14, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Oct 18, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Oct 9, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Oct 3, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ func IsParentRefEqual(ref1, ref2 gwapiv1.ParentReference, routeNS string) bool

type BackendRefContext

+ GetBackendRef func() *gwapiv1.BackendRef

+ GetFilters func() any

+ type BackendRefWithFilters struct

+ BackendRef *gwapiv1.BackendRef

+ Filters any

+ func (b BackendRefWithFilters) GetBackendRef() *gwapiv1.BackendRef

+ func (b BackendRefWithFilters) GetFilters() any

+ type DirectBackendRef struct

+ BackendRef *gwapiv1.BackendRef

+ func (d DirectBackendRef) GetBackendRef() *gwapiv1.BackendRef

+ func (d DirectBackendRef) GetFilters() any

Sep 16, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

type GRPCRouteContext

+ func (r *GRPCRouteContext) HasRuleNames(sectionName gwapiv1.SectionName) bool

+ func (r *GRPCRouteContext) SetRouteParentContext(forParentRef gwapiv1.ParentReference, ctx *RouteParentContext)

type HTTPRouteContext

+ func (r *HTTPRouteContext) HasRuleNames(sectionName gwapiv1.SectionName) bool

+ func (r *HTTPRouteContext) SetRouteParentContext(forParentRef gwapiv1.ParentReference, ctx *RouteParentContext)

type RouteContext

+ HasRuleNames func(sectionName gwapiv1.SectionName) bool

+ SetRouteParentContext func(forParentRef gwapiv1.ParentReference, ctx *RouteParentContext)

type TCPRouteContext

+ func (r *TCPRouteContext) HasRuleNames(sectionName gwapiv1.SectionName) bool

+ func (r *TCPRouteContext) SetRouteParentContext(forParentRef gwapiv1.ParentReference, ctx *RouteParentContext)

type TLSRouteContext

+ func (r *TLSRouteContext) HasRuleNames(sectionName gwapiv1.SectionName) bool

+ func (r *TLSRouteContext) SetRouteParentContext(forParentRef gwapiv1.ParentReference, ctx *RouteParentContext)

type UDPRouteContext

+ func (r *UDPRouteContext) GetParentRefs() map[gwapiv1.ParentReference]*RouteParentContext

+ func (r *UDPRouteContext) HasRuleNames(sectionName gwapiv1.SectionName) bool

+ func (r *UDPRouteContext) SetRouteParentContext(forParentRef gwapiv1.ParentReference, ctx *RouteParentContext)

Aug 8, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const GatewayNameLabel

type OpenIDConfig

+ EndSessionEndpoint *string

type Translator

+ func (t *Translator) ProcessBackendTLSPolicyStatus(btlsp []*gwapiv1a3.BackendTLSPolicy)

+ func (t *Translator) ProcessGlobalResources(resources *resource.Resources, xdsIRs resource.XdsIRMap, ...) error

Aug 5, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jul 30, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Dec 5, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 19, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Oct 20, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Sep 17, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Aug 11, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jul 4, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jun 4, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

May 14, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

type HTTPFilterIR

+ CORS *ir.CORS

+ CredentialInjection *ir.CredentialInjection

type Translator

+ ControllerNamespace string

+ GatewayNamespaceMode bool

+ func (t *Translator) IRKey(gatewayNN types.NamespacedName) string

May 1, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Apr 30, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

May 9, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ var HeaderValueRegexp = regexp.MustCompile(`^[!-~]+([\t ]?[!-~]+)*$`)

Mar 24, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Mar 5, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jan 31, 2025 GO-2025-3504 +1 more

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jan 24, 2025 GO-2025-3504 +1 more

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Mar 25, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Mar 6, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jan 23, 2025 GO-2025-3504 +1 more

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jan 14, 2025 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

type Translator

+ ListenerPortShiftDisabled bool

Dec 13, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Dec 2, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 28, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 7, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 6, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ var GRPCHeaderMatchTypeDerefOr = ptr.Deref[gwapiv1.GRPCHeaderMatchType]

Oct 25, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Dec 12, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 4, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Sep 24, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Sep 12, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jul 23, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const KindBackendTrafficPolicy

+ const KindEnvoyExtensionPolicy

+ const KindEnvoyPatchPolicy

+ const MaxConsistentHashTableSize

+ const MaxHTTP2InitialConnectionWindowSize

+ const MaxHTTP2InitialStreamWindowSize

+ const MinHTTP2InitialConnectionWindowSize

+ const MinHTTP2InitialStreamWindowSize

+ func IsMergeGatewaysEnabled(resources *Resources) bool

+ func OwnerLabels(gateway *gwapiv1.Gateway, mergeGateways bool) map[string]string

type Resources

+ Backends []*egv1a1.Backend

+ EnvoyExtensionPolicies []*egv1a1.EnvoyExtensionPolicy

+ EnvoyProxiesForGateways []*egv1a1.EnvoyProxy

+ EnvoyProxyForGatewayClass *egv1a1.EnvoyProxy

+ ExtensionServerPolicies []unstructured.Unstructured

+ func (r *Resources) GetBackend(namespace, name string) *egv1a1.Backend

+ func (r *Resources) GetEnvoyProxy(namespace, name string) *egv1a1.EnvoyProxy

type RouteParentContext

+ func (r *RouteParentContext) GetGateway() *GatewayContext

type Translator

+ BackendEnabled bool

+ WasmCache wasm.Cache

+ func (t *Translator) IsEnvoyServiceRouting(r *egv1a1.EnvoyProxy) bool

+ func (t *Translator) ProcessBackends(backends []*egv1a1.Backend) []*egv1a1.Backend

+ func (t *Translator) ProcessEnvoyExtensionPolicies(envoyExtensionPolicies []*egv1a1.EnvoyExtensionPolicy, ...) []*egv1a1.EnvoyExtensionPolicy

+ func (t *Translator) ProcessExtensionServerPolicies(policies []unstructured.Unstructured, gateways []*GatewayContext, ...) ([]unstructured.Unstructured, error)

Jul 9, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jun 14, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Apr 9, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Mar 13, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const HTTPRequestTimeout

+ const KindBackendTLSPolicy

+ const KindClientTrafficPolicy

+ const KindConfigMap

+ const KindSecurityPolicy

+ func GetBackendRef(b BackendRefContext) *gwapiv1.BackendRef

+ func GetFilters(b BackendRefContext) any

+ func GetTargetBackendReference(backendRef gwapiv1a2.BackendObjectReference, namespace string) gwapiv1a2.PolicyTargetReferenceWithSectionName

+ type BackendRefContext any

+ type ControllerResources []*Resources

+ func (c *ControllerResources) DeepCopy() *ControllerResources

+ func (c *ControllerResources) Equal(y *ControllerResources) bool

+ type OpenIDConfig struct

+ AuthorizationEndpoint string

+ TokenEndpoint string

type Resources

+ BackendTLSPolicies []*gwapiv1a2.BackendTLSPolicy

+ ConfigMaps []*v1.ConfigMap

+ func (r *Resources) GetConfigMap(namespace, name string) *v1.ConfigMap

type Translator

+ EnvoyPatchPolicyEnabled bool

+ Namespace string

+ func (t *Translator) ProcessClientTrafficPolicies(resources *Resources, gateways []*GatewayContext, xdsIR XdsIRMap, ...) []*egv1a1.ClientTrafficPolicy

Mar 5, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 1, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const AllSections

+ const GroupMultiClusterService

+ const KindServiceImport

+ const OwningGatewayClassLabel

+ func GatewayClassOwnerLabel(name string) map[string]string

+ func KindDerefOr(kind *gwapiv1.Kind, defaultKind string) string

+ func ProcessClientTrafficPolicies(clientTrafficPolicies []*egv1a1.ClientTrafficPolicy, ...) []*egv1a1.ClientTrafficPolicy

type HTTPFiltersContext

+ RuleIdx int

type Resources

+ BackendTrafficPolicies []*egv1a1.BackendTrafficPolicy

+ ClientTrafficPolicies []*egv1a1.ClientTrafficPolicy

+ SecurityPolicies []*egv1a1.SecurityPolicy

+ ServiceImports []*mcsapi.ServiceImport

+ func (r *Resources) GetEndpointSlicesForBackend(svcNamespace, svcName string, backendKind string) []*discoveryv1.EndpointSlice

+ func (r *Resources) GetServiceImport(namespace, name string) *mcsapi.ServiceImport

type Translator

+ EndpointRoutingDisabled bool

+ MergeGateways bool

+ func (t *Translator) InitIRs(gateways []*GatewayContext, resources *Resources) (map[string]*ir.Xds, map[string]*ir.Infra)

+ func (t *Translator) ProcessBackendTrafficPolicies(backendTrafficPolicies []*egv1a1.BackendTrafficPolicy, ...) []*egv1a1.BackendTrafficPolicy

+ func (t *Translator) ProcessSecurityPolicies(securityPolicies []*egv1a1.SecurityPolicy, gateways []*GatewayContext, ...) []*egv1a1.SecurityPolicy

Oct 28, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Aug 2, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ func GetHostnames(route RouteContext) []string

+ func GetParentReferences(route RouteContext) []v1beta1.ParentReference

+ func GetRouteStatus(route RouteContext) *v1beta1.RouteStatus

+ func GetRouteType(route RouteContext) v1beta1.Kind

+ type AddressesTranslator interface

+ ProcessAddresses func(gateways []*GatewayContext, xdsIR XdsIRMap, infraIR InfraIRMap, ...)

type GRPCRouteContext

+ ParentRefs map[v1beta1.ParentReference]*RouteParentContext

type HTTPRouteContext

+ ParentRefs map[v1beta1.ParentReference]*RouteParentContext

type Resources

+ EndpointSlices []*discoveryv1.EndpointSlice

+ EnvoyPatchPolicies []*egv1a1.EnvoyPatchPolicy

type RouteParentContext

+ GRPCRoute *v1alpha2.GRPCRoute

+ HTTPRoute *v1beta1.HTTPRoute

+ TCPRoute *v1alpha2.TCPRoute

+ TLSRoute *v1alpha2.TLSRoute

+ UDPRoute *v1alpha2.UDPRoute

+ func GetRouteParentContext(route RouteContext, forParentRef v1beta1.ParentReference) *RouteParentContext

type TCPRouteContext

+ ParentRefs map[v1beta1.ParentReference]*RouteParentContext

type TLSRouteContext

+ ParentRefs map[v1beta1.ParentReference]*RouteParentContext

type Translator

+ func (t *Translator) ProcessAddresses(gateways []*GatewayContext, xdsIR XdsIRMap, infraIR InfraIRMap, ...)

+ func (t *Translator) ProcessEnvoyPatchPolicies(envoyPatchPolicies []*egv1a1.EnvoyPatchPolicy, xdsIR XdsIRMap)

type UDPRouteContext

+ ParentRefs map[v1beta1.ParentReference]*RouteParentContext

Jul 26, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Apr 24, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const KindEnvoyProxy

+ const KindGatewayClass

+ const KindNamespace

+ func GRPCMethodMatchTypeDerefOr(matchType *v1alpha2.GRPCMethodMatchType, ...) v1alpha2.GRPCMethodMatchType

type GRPCRouteContext

+ GatewayControllerName string

type HTTPFilterIR

+ ExtensionRefs []*ir.UnstructuredRef

type HTTPRouteContext

+ GatewayControllerName string

type ListenerContext

+ func (l *ListenerContext) SetTLSSecrets(tlsSecrets []*v1.Secret)

type Resources

+ ExtensionRefFilters []unstructured.Unstructured

+ GatewayClass *v1beta1.GatewayClass

type RouteParentContext

+ func (r *RouteParentContext) HasCondition(route RouteContext, condType v1beta1.RouteConditionType, ...) bool

type TCPRouteContext

+ GatewayControllerName string

type TLSRouteContext

+ GatewayControllerName string

type Translator

+ ExtensionGroupKinds []schema.GroupKind

+ GatewayControllerName string

type UDPRouteContext

+ GatewayControllerName string

Apr 13, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Feb 10, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const KindGRPCRoute

+ const KindTCPRoute

+ const KindUDPRoute

+ const L4Protocol

+ const L7Protocol

+ const TCPProtocol

+ const UDPProtocol

+ func DowngradeBackendRef(old v1beta1.BackendRef) v1alpha2.BackendRef

+ func IsAuthnHTTPFilter(filter *v1beta1.HTTPRouteFilter) bool

+ func IsRateLimitHTTPFilter(filter *v1beta1.HTTPRouteFilter) bool

+ func QueryParamMatchTypeDerefOr(matchType *v1beta1.QueryParamMatchType, ...) v1beta1.QueryParamMatchType

+ func UpgradeBackendRef(old v1alpha2.BackendRef) v1beta1.BackendRef

+ func ValidateGRPCRouteFilter(filter *v1alpha2.GRPCRouteFilter) error

+ func ValidateHTTPRouteFilter(filter *v1beta1.HTTPRouteFilter) error

+ type FiltersTranslator interface

+ type GRPCRouteContext struct

+ func (g *GRPCRouteContext) GetHostnames() []string

+ func (g *GRPCRouteContext) GetParentReferences() []v1beta1.ParentReference

+ func (g *GRPCRouteContext) GetRouteParentContext(forParentRef v1beta1.ParentReference) *RouteParentContext

+ func (g *GRPCRouteContext) GetRouteStatus() *v1beta1.RouteStatus

+ func (g *GRPCRouteContext) GetRouteType() string

type GatewayContext

+ func (g *GatewayContext) ResetListeners()

+ type HTTPFilterIR struct

+ AddRequestHeaders []ir.AddHeader

+ AddResponseHeaders []ir.AddHeader

+ DirectResponse *ir.DirectResponse

+ Mirrors []*ir.RouteDestination

+ RateLimit *ir.RateLimit

+ RedirectResponse *ir.Redirect

+ RemoveRequestHeaders []string

+ RemoveResponseHeaders []string

+ RequestAuthentication *ir.RequestAuthentication

+ URLRewrite *ir.URLRewrite

+ type HTTPFiltersContext struct

+ ParentRef *RouteParentContext

+ Route RouteContext

+ type HTTPFiltersTranslator interface

type HTTPRouteContext

+ func (h *HTTPRouteContext) GetRouteStatus() *v1beta1.RouteStatus

type ListenerContext

+ func (l *ListenerContext) AttachedRoutes() int32

+ type ListenersTranslator interface

+ ProcessListeners func(gateways []*GatewayContext, xdsIR XdsIRMap, infraIR InfraIRMap, ...)

type Resources

+ AuthenticationFilters []*egv1a1.AuthenticationFilter

+ EnvoyProxy *egcfgv1a1.EnvoyProxy

+ GRPCRoutes []*v1alpha2.GRPCRoute

+ RateLimitFilters []*egv1a1.RateLimitFilter

+ TCPRoutes []*v1alpha2.TCPRoute

+ UDPRoutes []*v1alpha2.UDPRoute

+ func NewResources() *Resources

+ func (in *Resources) DeepCopy() *Resources

+ func (in *Resources) DeepCopyInto(out *Resources)

type RouteContext

+ GetRouteStatus func() *v1beta1.RouteStatus

+ type RoutesTranslator interface

+ ProcessGRPCRoutes func(grpcRoutes []*v1alpha2.GRPCRoute, gateways []*GatewayContext, ...) []*GRPCRouteContext

+ ProcessHTTPRoutes func(httpRoutes []*v1beta1.HTTPRoute, gateways []*GatewayContext, ...) []*HTTPRouteContext

+ ProcessTCPRoutes func(tcpRoutes []*v1alpha2.TCPRoute, gateways []*GatewayContext, ...) []*TCPRouteContext

+ ProcessTLSRoutes func(tlsRoutes []*v1alpha2.TLSRoute, gateways []*GatewayContext, ...) []*TLSRouteContext

+ ProcessUDPRoutes func(udpRoutes []*v1alpha2.UDPRoute, gateways []*GatewayContext, ...) []*UDPRouteContext

+ type TCPRouteContext struct

+ func (t *TCPRouteContext) GetHostnames() []string

+ func (t *TCPRouteContext) GetParentReferences() []v1beta1.ParentReference

+ func (t *TCPRouteContext) GetRouteParentContext(forParentRef v1beta1.ParentReference) *RouteParentContext

+ func (t *TCPRouteContext) GetRouteStatus() *v1beta1.RouteStatus

+ func (t *TCPRouteContext) GetRouteType() string

type TLSRouteContext

+ func (t *TLSRouteContext) GetRouteStatus() *v1beta1.RouteStatus

type TranslateResult

+ GRPCRoutes []*v1alpha2.GRPCRoute

+ TCPRoutes []*v1alpha2.TCPRoute

+ UDPRoutes []*v1alpha2.UDPRoute

type Translator

+ GlobalRateLimitEnabled bool

+ ProxyImage string

+ func (t *Translator) ProcessGRPCFilters(parentRef *RouteParentContext, route RouteContext, ...) *HTTPFiltersContext

+ func (t *Translator) ProcessGRPCRoutes(grpcRoutes []*v1alpha2.GRPCRoute, gateways []*GatewayContext, ...) []*GRPCRouteContext

+ func (t *Translator) ProcessHTTPFilters(parentRef *RouteParentContext, route RouteContext, ...) *HTTPFiltersContext

+ func (t *Translator) ProcessTCPRoutes(tcpRoutes []*v1alpha2.TCPRoute, gateways []*GatewayContext, ...) []*TCPRouteContext

+ func (t *Translator) ProcessUDPRoutes(udpRoutes []*v1alpha2.UDPRoute, gateways []*GatewayContext, ...) []*UDPRouteContext

+ type TranslatorManager interface

+ GetRelevantGateways func(gateways []*v1beta1.Gateway) []*GatewayContext

+ Translate func(resources *Resources) *TranslateResult

+ type UDPRouteContext struct

+ func (u *UDPRouteContext) GetHostnames() []string

+ func (u *UDPRouteContext) GetParentReferences() []v1beta1.ParentReference

+ func (u *UDPRouteContext) GetRouteParentContext(forParentRef v1beta1.ParentReference) *RouteParentContext

+ func (u *UDPRouteContext) GetRouteStatus() *v1beta1.RouteStatus

+ func (u *UDPRouteContext) GetRouteType() string

Feb 3, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Oct 20, 2022 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const KindGateway

+ const KindHTTPRoute

+ const KindSecret

+ const KindService

+ const KindTLSRoute

+ const OwningGatewayNameLabel

+ const OwningGatewayNamespaceLabel

+ func DowngradeParentReference(old v1beta1.ParentReference) v1alpha2.ParentReference

+ func DowngradeRouteParentStatuses(routeParentStatuses []v1beta1.RouteParentStatus) []v1alpha2.RouteParentStatus

+ func FromNamespacesPtr(fromNamespaces v1beta1.FromNamespaces) *v1beta1.FromNamespaces

+ func GatewayAddressTypePtr(addr v1beta1.AddressType) *v1beta1.AddressType

+ func GatewayOwnerLabels(namespace, name string) map[string]string

+ func GroupDerefOr(group *v1beta1.Group, defaultGroup string) string

+ func GroupPtr(name string) *v1beta1.Group

+ func GroupPtrV1Alpha2(group string) *v1alpha2.Group

+ func HasReadyListener(listeners []*ListenerContext) bool

+ func HeaderMatchTypeDerefOr(matchType *v1beta1.HeaderMatchType, defaultType v1beta1.HeaderMatchType) v1beta1.HeaderMatchType

+ func Int32Ptr(val int32) *int32

+ func IsRefToGateway(parentRef v1beta1.ParentReference, gateway types.NamespacedName) bool

+ func KindPtr(name string) *v1beta1.Kind

+ func KindPtrV1Alpha2(kind string) *v1alpha2.Kind

+ func NamespaceDerefOr(namespace *v1beta1.Namespace, defaultNamespace string) string

+ func NamespaceDerefOrAlpha(namespace *v1alpha2.Namespace, defaultNamespace string) string

+ func NamespacePtr(name string) *v1beta1.Namespace

+ func NamespacePtrV1Alpha2(namespace string) *v1alpha2.Namespace

+ func ObjectNamePtr(val string) *v1alpha2.ObjectName

+ func PathMatchTypeDerefOr(matchType *v1beta1.PathMatchType, defaultType v1beta1.PathMatchType) v1beta1.PathMatchType

+ func PathMatchTypePtr(pType v1beta1.PathMatchType) *v1beta1.PathMatchType

+ func PortNumPtr(val int32) *v1beta1.PortNumber

+ func PortNumPtrV1Alpha2(port int) *v1alpha2.PortNumber

+ func SectionNamePtr(name string) *v1beta1.SectionName

+ func SectionNamePtrV1Alpha2(sectionName string) *v1alpha2.SectionName

+ func StringPtr(val string) *string

+ func TLSModeTypePtr(mode v1beta1.TLSModeType) *v1beta1.TLSModeType

+ func UpgradeParentReference(old v1alpha2.ParentReference) v1beta1.ParentReference

+ func UpgradeParentReferences(old []v1alpha2.ParentReference) []v1beta1.ParentReference

+ func UpgradeRouteParentStatuses(routeParentStatuses []v1alpha2.RouteParentStatus) []v1beta1.RouteParentStatus

+ type GatewayContext struct

+ func (g *GatewayContext) GetListenerContext(listenerName v1beta1.SectionName) *ListenerContext

+ type HTTPRouteContext struct

+ func (h *HTTPRouteContext) GetHostnames() []string

+ func (h *HTTPRouteContext) GetParentReferences() []v1beta1.ParentReference

+ func (h *HTTPRouteContext) GetRouteParentContext(forParentRef v1beta1.ParentReference) *RouteParentContext

+ func (h *HTTPRouteContext) GetRouteType() string

+ type InfraIRMap map[string]*ir.Infra

+ type ListenerContext struct

+ func GetReferencedListeners(parentRef v1beta1.ParentReference, gateways []*GatewayContext) (bool, []*ListenerContext)

+ func (l *ListenerContext) AllowsKind(kind v1beta1.RouteGroupKind) bool

+ func (l *ListenerContext) AllowsNamespace(namespace *v1.Namespace) bool

+ func (l *ListenerContext) GetConditions() []metav1.Condition

+ func (l *ListenerContext) IncrementAttachedRoutes()

+ func (l *ListenerContext) IsReady() bool

+ func (l *ListenerContext) ResetAttachedRoutes()

+ func (l *ListenerContext) ResetConditions()

+ func (l *ListenerContext) SetCondition(conditionType v1beta1.ListenerConditionType, status metav1.ConditionStatus, ...)

+ func (l *ListenerContext) SetSupportedKinds(kinds ...v1beta1.RouteGroupKind)

+ func (l *ListenerContext) SetTLSSecret(tlsSecret *v1.Secret)

+ type Resources struct

+ Gateways []*v1beta1.Gateway

+ HTTPRoutes []*v1beta1.HTTPRoute

+ Namespaces []*v1.Namespace

+ ReferenceGrants []*v1alpha2.ReferenceGrant

+ Secrets []*v1.Secret

+ Services []*v1.Service

+ TLSRoutes []*v1alpha2.TLSRoute

+ func (r *Resources) GetNamespace(name string) *v1.Namespace

+ func (r *Resources) GetSecret(namespace, name string) *v1.Secret

+ func (r *Resources) GetService(namespace, name string) *v1.Service

+ type RouteContext interface

+ GetHostnames func() []string

+ GetParentReferences func() []v1beta1.ParentReference

+ GetRouteParentContext func(forParentRef v1beta1.ParentReference) *RouteParentContext

+ GetRouteType func() string

+ type RouteParentContext struct

+ func (r *RouteParentContext) IsAccepted(route RouteContext) bool

+ func (r *RouteParentContext) ResetConditions(route RouteContext)

+ func (r *RouteParentContext) SetCondition(route RouteContext, conditionType v1beta1.RouteConditionType, ...)

+ func (r *RouteParentContext) SetListeners(listeners ...*ListenerContext)

+ type TLSRouteContext struct

+ func (t *TLSRouteContext) GetHostnames() []string

+ func (t *TLSRouteContext) GetParentReferences() []v1beta1.ParentReference

+ func (t *TLSRouteContext) GetRouteParentContext(forParentRef v1beta1.ParentReference) *RouteParentContext

+ func (t *TLSRouteContext) GetRouteType() string

+ type TranslateResult struct

+ Gateways []*v1beta1.Gateway

+ HTTPRoutes []*v1beta1.HTTPRoute

+ InfraIR InfraIRMap

+ TLSRoutes []*v1alpha2.TLSRoute

+ XdsIR XdsIRMap

+ type Translator struct

+ GatewayClassName v1beta1.ObjectName

+ func (t *Translator) GetRelevantGateways(gateways []*v1beta1.Gateway) []*GatewayContext

+ func (t *Translator) ProcessHTTPRoutes(httpRoutes []*v1beta1.HTTPRoute, gateways []*GatewayContext, ...) []*HTTPRouteContext

+ func (t *Translator) ProcessListeners(gateways []*GatewayContext, xdsIR XdsIRMap, infraIR InfraIRMap, ...)

+ func (t *Translator) ProcessTLSRoutes(tlsRoutes []*v1alpha2.TLSRoute, gateways []*GatewayContext, ...) []*TLSRouteContext

+ func (t *Translator) Translate(resources *Resources) *TranslateResult

+ type XdsIRMap map[string]*ir.Xds

+ type XdsIRRoutes []*ir.HTTPRoute

+ func (x XdsIRRoutes) Len() int

+ func (x XdsIRRoutes) Less(i, j int) bool

+ func (x XdsIRRoutes) Swap(i, j int)

Sep 30, 2022 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Aug 31, 2022 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway