network

Jul 7, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

+ const DefaultRouteHeaderName

+ const ProbePath

+ const TagHeaderBasedRoutingKey

+ const TagHeaderName

type Config

+ TagHeaderBasedRouting bool

Aug 17, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Jun 25, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Jun 1, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

May 26, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

type DomainTemplateValues

+ Labels map[string]string

+ type ReqEvent struct

+ Key types.NamespacedName

+ Time time.Time

+ Type ReqEventType

+ type ReqEventType int

+ const ProxiedIn

+ const ProxiedOut

+ const ReqIn

+ const ReqOut

+ type RequestStats struct

+ func NewRequestStats(startedAt time.Time) *RequestStats

+ func (s *RequestStats) HandleEvent(event ReqEvent)

+ func (s *RequestStats) Report(now time.Time) RequestStatsReport

+ type RequestStatsReport struct

+ AverageConcurrency float64

+ AverageProxiedConcurrency float64

+ ProxiedRequestCount float64

+ RequestCount float64

Aug 17, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Jun 16, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

May 13, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Apr 14, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

type Config

+ func NewConfigFromMap(data map[string]string) (*Config, error)

May 13, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Mar 23, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Mar 17, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Mar 3, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

+ const AutoscalingUserAgent

+ const IngressReadinessUserAgent

Jan 25, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Jan 21, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

+ func NameForPortNumber(svc *corev1.Service, portNumber int32) (string, error)

+ func NewBufferPool() httputil.BufferPool

+ func PortNumberForName(sub corev1.EndpointSubset, portName string) (int32, error)

Apr 17, 2020 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Dec 17, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Dec 10, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Dec 9, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Oct 29, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

+ const ActivatorUserAgent

+ const DefaultIngressClassKey

+ const DeprecatedDefaultIngressClassKey

+ const QueueProxyUserAgent

+ const UserAgentKey

type Config

+ DefaultIngressClass string

Sep 16, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

+ const HashHeaderName

+ var ProbeHeaderValue = "probe"

+ func ErrorHandler(logger *zap.SugaredLogger) func(http.ResponseWriter, *http.Request, error)

+ func NewProbeHandler(next http.Handler) http.Handler

Aug 27, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Aug 6, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

+ const CertManagerCertificateClassName

+ const DefaultCertificateClassKey

+ const KubeProbeUAPrefix

+ func IsProbe(r *http.Request) bool

+ func KnativeProbeHeader(r *http.Request) string

+ func KnativeProxyHeader(r *http.Request) string

+ func NewProberTransport() http.RoundTripper

type Config

+ DefaultCertificateClass string

Jun 29, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Jun 25, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

+ const TagTemplateKey

+ var DefaultTagTemplate = "{{.Tag}}-{{.Name}}"

type Config

+ TagTemplate string

+ func (c *Config) GetTagTemplate() *template.Template

type DomainTemplateValues

+ Annotations map[string]string

+ type TagTemplateValues struct

+ Name string

+ Tag string

+ func (in *TagTemplateValues) DeepCopy() *TagTemplateValues

+ func (in *TagTemplateValues) DeepCopyInto(out *TagTemplateValues)

Jun 6, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

May 14, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

+ const KubeletProbeHeaderName

+ const OriginalHostHeader

+ var AutoTLSKey = "autoTLS"

+ var AutoTransport = NewAutoTransport()

+ var DefaultH2CTransport http.RoundTripper = NewH2CTransport()

+ var HTTPProtocolKey = "httpProtocol"

+ func GetClusterDomainName() string

+ func GetServiceHostname(name string, namespace string) string

+ func IsKubeletProbe(r *http.Request) bool

+ func ListenAndServe(addr string, h http.Handler) error

+ func NewAutoTransport() http.RoundTripper

+ func NewH2CTransport() http.RoundTripper

+ func NewServer(addr string, h http.Handler) *http.Server

+ func RewriteHostIn(r *http.Request)

+ func RewriteHostOut(r *http.Request)

type Config

+ AutoTLS bool

+ HTTPProtocol HTTPProtocol

+ func (c *Config) GetDomainTemplate() *template.Template

+ type DomainTemplateValues struct

+ Domain string

+ Name string

+ Namespace string

+ func (in *DomainTemplateValues) DeepCopy() *DomainTemplateValues

+ func (in *DomainTemplateValues) DeepCopyInto(out *DomainTemplateValues)

+ type HTTPProtocol string

+ const HTTPDisabled

+ const HTTPEnabled

+ const HTTPRedirected

+ type RoundTripperFunc func(*http.Request) (*http.Response, error)

+ func (rt RoundTripperFunc) RoundTrip(r *http.Request) (*http.Response, error)

Apr 18, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

+ const DefaultConnTimeout

Apr 5, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Apr 2, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

+ const DefaultDomainTemplate

+ const DomainTemplateKey

+ const ProxyHeaderName

type Config

+ DomainTemplate string

Mar 11, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Feb 19, 2019 GO-2023-2355

  GO-2023-2355: Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Changes in this version

+ const ConfigName

+ const DefaultClusterIngressClassKey

+ const IstioIngressClassName

+ const IstioOutboundIPRangesKey

+ const ProbeHeaderName

+ type Config struct

+ DefaultClusterIngressClass string

+ IstioOutboundIPRanges string

+ func NewConfigFromConfigMap(configMap *corev1.ConfigMap) (*Config, error)

+ func (in *Config) DeepCopy() *Config

+ func (in *Config) DeepCopyInto(out *Config)