- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 17 for service_account (0.38 sec)
-
pkg/workloadapi/workload.proto
// The SPIFFE identity of the workload. The identity is joined to form spiffe://<trust_domain>/ns/<namespace>/sa/<service_account>. // TrustDomain of the workload. May be elided if this is the mesh wide default (typically cluster.local) string trust_domain = 6; // ServiceAccount of the workload. May be elided if this is "default" string service_account = 7; // If present, the waypoint proxy for this workload.
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 12 18:02:35 UTC 2024 - 12.9K bytes - Viewed (0) -
pkg/controlplane/apiserver/config.go
for _, f := range opts.Authentication.ServiceAccounts.KeyFiles { keys, err := keyutil.PublicKeysFromFile(f) if err != nil { return nil, nil, fmt.Errorf("failed to parse key file %q: %w", f, err) } pubKeys = append(pubKeys, keys...) } config.ServiceAccountIssuerURL = opts.Authentication.ServiceAccounts.Issuers[0] config.ServiceAccountJWKSURI = opts.Authentication.ServiceAccounts.JWKSURI
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Jun 07 17:57:37 UTC 2024 - 14.9K bytes - Viewed (0) -
pilot/pkg/model/endpointshards.go
oldServiceAccount := shards.ServiceAccounts serviceAccounts := sets.String{} for _, epShards := range shards.Shards { for _, ep := range epShards { if ep.ServiceAccount != "" { serviceAccounts.Insert(ep.ServiceAccount) } } } if !oldServiceAccount.Equals(serviceAccounts) { shards.ServiceAccounts = serviceAccounts
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Jun 14 04:34:37 UTC 2024 - 15.6K bytes - Viewed (0) -
samples/addons/prometheus.yaml
--- # Source: prometheus/templates/serviceaccount.yaml apiVersion: v1 kind: ServiceAccount metadata: labels: app.kubernetes.io/component: server app.kubernetes.io/name: prometheus app.kubernetes.io/instance: prometheus app.kubernetes.io/version: v2.52.0 helm.sh/chart: prometheus-25.21.0 app.kubernetes.io/managed-by: Helm app.kubernetes.io/part-of: prometheus name: prometheus namespace: istio-system
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 12 18:57:35 UTC 2024 - 16.2K bytes - Viewed (0) -
pilot/pkg/serviceregistry/kube/controller/ambient/waypoints.go
// waypoint. Must be one of "all", "service", "workload". TrafficType string // ServiceAccounts from instances of the waypoint. // This only handles Pods. If we wish to support non-pod waypoints, we'll // want to index ServiceEntry/WorkloadEntry or possibly allow specifying // the ServiceAccounts directly on a Gateway resource. ServiceAccounts []string }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 12 18:02:28 UTC 2024 - 11.1K bytes - Viewed (0) -
tests/integration/ambient/main_test.go
Ports: ports.All(), ServiceAccount: true, Subsets: []echo.SubsetConfig{ { Replicas: 1, Version: "v1", }, { Replicas: 1, Version: "v2", }, }, }). WithConfig(echo.Config{ Service: Uncaptured, Namespace: apps.Namespace, Ports: ports.All(), ServiceAccount: true, Subsets: []echo.SubsetConfig{
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 12 00:07:28 UTC 2024 - 10.8K bytes - Viewed (0) -
samples/addons/kiali.yaml
--- # Source: kiali-server/templates/serviceaccount.yaml apiVersion: v1 kind: ServiceAccount metadata: name: kiali namespace: istio-system labels: helm.sh/chart: kiali-server-1.85.0 app: kiali app.kubernetes.io/name: kiali app.kubernetes.io/instance: kiali version: "v1.85.0" app.kubernetes.io/version: "v1.85.0" app.kubernetes.io/managed-by: Helm app.kubernetes.io/part-of: "kiali" ... ---
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 12 18:57:35 UTC 2024 - 10.6K bytes - Viewed (0) -
pilot/pkg/serviceregistry/kube/controller/ambient/workloads.go
Name: wle.Name, Namespace: wle.Namespace, Network: network, ClusterId: string(a.ClusterID), ServiceAccount: wle.Spec.ServiceAccount, Services: constructServicesFromWorkloadEntry(&wle.Spec, services), AuthorizationPolicies: policies, Status: workloadapi.WorkloadStatus_HEALTHY, // TODO: WE can be unhealthy
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 13 16:51:29 UTC 2024 - 20.9K bytes - Viewed (0) -
pilot/pkg/networking/core/cluster_builder.go
policy: trafficPolicy, port: port, clusterMode: clusterMode, direction: model.TrafficDirectionOutbound, } if clusterMode == DefaultClusterMode { opts.serviceAccounts = serviceAccounts opts.istioMtlsSni = model.BuildDNSSrvSubsetKey(model.TrafficDirectionOutbound, "", service.Hostname, port.Port) opts.meshExternal = service.MeshExternal opts.serviceRegistry = service.Attributes.ServiceRegistry
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 13 01:56:28 UTC 2024 - 31.6K bytes - Viewed (0) -
pkg/security/security.go
CredFetcher CredFetcher // credential identity provider CredIdentityProvider string // Namespace corresponding to workload WorkloadNamespace string // Name of the Service Account ServiceAccount string // XDS auth provider XdsAuthProvider string // Cert signer info CertSigner string // Delay in reading certificates from file after the change is detected. This is useful in cases
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 13 17:48:28 UTC 2024 - 19.1K bytes - Viewed (0)