Affected by GO-2022-0457 and 10 other vulnerabilities

GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

kvstoremesh

package

v0.15.7 Latest Latest Go to latest Published: Aug 31, 2023 License: Apache-2.0 Imports: 16 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/cilium/cilium

Documentation ¶

Index ¶

Variables
type KVStoreMesh
- func (km *KVStoreMesh) Start(ctx hive.HookContext) error
- func (km *KVStoreMesh) Stop(hive.HookContext) error

Constants ¶

This section is empty.

Variables ¶

View Source

var Cell = cell.Module(
	"kvstoremesh",
	"KVStoreMesh caches remote cluster information in a local kvstore",

	cell.Provide(newKVStoreMesh),

	cell.Config(common.Config{}),
	store.Cell,

	cell.Metric(common.MetricsProvider("")),
)

Functions ¶

This section is empty.

Types ¶

type KVStoreMesh ¶

type KVStoreMesh struct {
	// contains filtered or unexported fields
}

KVStoreMesh is a cache of multiple remote clusters

func (*KVStoreMesh) Start ¶

func (km *KVStoreMesh) Start(ctx hive.HookContext) error

func (*KVStoreMesh) Stop ¶

func (km *KVStoreMesh) Stop(hive.HookContext) error

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL