Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium