Affected by GO-2022-0457
and 11 other vulnerabilities
GO-2022-0457 : Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium
GO-2022-0458 : Improper Privilege Management in Cilium in github.com/cilium/cilium
GO-2022-0959 : Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium
GO-2023-1643 : Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium
GO-2023-1730 : Debug mode leaks confidential data in Cilium in github.com/cilium/cilium
GO-2023-1785 : Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium
GO-2023-2078 : Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium
GO-2023-2079 : Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium
GO-2023-2080 : Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium
GO-2024-2656 : Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium
GO-2024-2666 : Insecure IPsec transparent encryption in github.com/cilium/cilium
GO-2024-3072 : Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium
Discover Packages
github.com/cilium/cilium
pkg
k8s
synced
package
Version:
v1.9.0-rc3
Opens a new window with list of versions in this module.
Published: Nov 3, 2020
License: Apache-2.0
Opens a new window with license information.
Imports: 24
Opens a new window with list of imports.
Imported by: 4
Opens a new window with list of known importers.
Documentation
Documentation
¶
Package synced provides tools for tracking if k8s resources have
been initially sychronized with the k8s apiserver.
func GetCRDResourceNames() []string
GetCRDResourceNames returns the list of Cilium CRDs we know about.
SyncCRDs will sync Cilium CRDs to ensure that they have all been
installed inside the K8s cluster. These CRDs are added by the
Cilium Operator. This function will block until it finds all the
CRDs or if a timeout occurs.
APIGroups is a lockable map to hold which k8s API Groups we have
enabled/in-use
Note: We can replace it with a Go 1.9 map once we require that version
Resources maps resource names to channels that are closed upon initial
sync with k8s.
BlockWaitGroupToSyncResources ensures that anything which waits on waitGroup
waits until all objects of the specified resource stored in Kubernetes are
received by the informer and processed by controller.
Fatally exits if syncing these initial objects fails.
If the given stop channel is closed, it does not fatal.
Once the k8s caches are synced against k8s, k8sCacheSynced is also closed.
WaitForCacheSync waits for all K8s resources represented by
resourceNames to have their K8s caches synchronized.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.