common

May 10, 2024

Changes in this version

+ var ErrClusterIDChanged = errors.New("etcd cluster ID has changed")

+ var ErrEtcdInvalidResponse = errors.New("received an invalid etcd response")

Mar 13, 2024 GO-2024-2666

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

Feb 14, 2024 GO-2024-2653GO-2024-2656GO-2024-2657GO-2024-2666

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

Jan 31, 2024 GO-2024-2653GO-2024-2656GO-2024-2657GO-2024-2666

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

Changes in this version

type Configuration

+ ClusterInfo types.ClusterInfo

Aug 31, 2023 GO-2024-2568GO-2024-2569GO-2024-2656GO-2024-2666

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

Changes in this version

+ func MetricsProvider(subsystem string) func() Metrics

+ type ClusterMesh struct

+ func NewClusterMesh(c Configuration) ClusterMesh

+ func (cm *ClusterMesh) ForEachRemoteCluster(fn func(RemoteCluster) error) error

+ func (cm *ClusterMesh) NumReadyClusters() int

+ func (cm *ClusterMesh) Start(hive.HookContext) error

+ func (cm *ClusterMesh) Stop(hive.HookContext) error

+ type Config struct

+ ClusterMeshConfig string

+ func (def Config) Flags(flags *pflag.FlagSet)

+ type Configuration struct

+ ClusterSizeDependantInterval kvstore.ClusterSizeDependantIntervalFunc

+ Metrics Metrics

+ NewRemoteCluster RemoteClusterCreatorFunc

+ NodeName string

+ ServiceIPGetter k8s.ServiceIPGetter

+ type Metrics struct

+ LastFailureTimestamp metric.Vec[metric.Gauge]

+ ReadinessStatus metric.Vec[metric.Gauge]

+ TotalFailures metric.Vec[metric.Gauge]

+ TotalRemoteClusters metric.Vec[metric.Gauge]

+ type RemoteCluster interface

+ ClusterConfigRequired func() bool

+ Remove func()

+ Run func(ctx context.Context, backend kvstore.BackendOperations, ...)

+ Stop func()

+ type RemoteClusterCreatorFunc func(name string, status StatusFunc) RemoteCluster

+ type StatusFunc func() *models.RemoteCluster