Affected by GO-2025-3416 and 6 other vulnerabilities

GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

GO-2025-3635: In Cilium, packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

GO-2026-4856: Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic in github.com/cilium/cilium

GO-2026-5400: Cillium exposes sensitive information included in the cilium-bugtool debug archive in github.com/cilium/cilium

GO-2026-5905: Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access in github.com/cilium/cilium

GO-2026-5914: CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation in github.com/cilium/cilium

model

package

v1.14.18 Latest Latest Go to latest Published: Dec 12, 2024 License: Apache-2.0 Imports: 4 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/cilium/cilium

Links

Documentation ¶

Overview ¶

Package model contains a data model for translations from upstream Kubernetes resources to Cilium Kubernetes resources.

Initially, used for Ingress to CiliumEnvoyConfig translation to enable shared load balancing, but will be used for other things in the future (such as Gateway API support).

Index ¶

func AddressOf[T any](v T) *T
func ComputeHosts(routeHostnames []string, listenerHostname *string) []string
type Backend
type BackendPort
- func (be *BackendPort) GetPort() string
type DirectResponse
type FullyQualifiedResource
- func AddSource(sourceList []FullyQualifiedResource, source FullyQualifiedResource) []FullyQualifiedResource
type HTTPHeaderFilter
type HTTPListener
- func (l *HTTPListener) GetPort() uint32
- func (l *HTTPListener) GetSources() []FullyQualifiedResource
type HTTPRequestMirror
type HTTPRequestRedirectFilter
type HTTPRoute
- func (r *HTTPRoute) GetMatchKey() string
type HTTPURLRewriteFilter
type Header
type KeyValueMatch
- func (kv KeyValueMatch) String() string
type Listener
type Model