Revision 4c8c03db7a77415208793b2fec3509fe6ca3b31c authored by Tom Hadlaw on 18 June 2024, 21:54:34 UTC, committed by Tom on 21 June 2024, 06:31:26 UTC
Errors such as "invalid character 'T' looking for beginning of value"
can be emitted by k8s client-go libraries if there is a problem decoding
the underlying k8s object from the apiserver.

Specifically, this can occur if apiserver is sending a json containing
an error message and not a k8s object.

These errors can be confusing, so this adds a k8s error handler case to
catch these and emit a more user friendly message.

Signed-off-by: Tom Hadlaw <tom.hadlaw@isovalent.com>
1 parent 3fc57b3
Raw File
SECURITY.md
# Security Policy

## Supported Versions

| Version  | Supported          |
|----------| ------------------ |
| main     | :white_check_mark: |
| 1.15.x   | :white_check_mark: |
| 1.14.x   | :white_check_mark: |
| 1.13.x   | :white_check_mark: |
| < 1.13.0 | :x:                |

## Reporting a Vulnerability

We strongly encourage you to report security vulnerabilities to
our private security mailing list: security@cilium.io - first, before
disclosing them in any public forums.

A threat model for Cilium and recommendations for running Cilium in production
environments can be found [here][threat-model]. Please ensure that you have
taken this threat model into consideration before making a report, including
considering the feasibility of an attack against a correctly secured
environment.

This is a private mailing list where members of Cilium's
[Security Team](https://github.com/cilium/community/blob/main/roles/Security-Team.md)
are subscribed to, and is treated as top priority.

[threat-model]: https://docs.cilium.io/en/latest/security/threat-model/
back to top