redirection - Code Search

architecture/ambient/ztunnel.md

## Redirection

As ztunnel aims to transparently encrypt and route users traffic, we need a mechanism to capture all traffic entering and leaving "mesh" pods.
This is a security critical task: if the ztunnel can be bypassed, authorization policies can be bypassed.

Redirection must meet these requirements:

Registered: Wed Nov 06 22:53:10 UTC 2024

- Last Modified: Wed Jul 17 23:10:17 UTC 2024

- 16.8K bytes

- Viewed (0)

github.com/minio/minio

docs/sts/web-identity.md

MINIO_IDENTITY_OPENID_SCOPES="openid,groups"
MINIO_IDENTITY_OPENID_REDIRECT_URI="http://127.0.0.1:10000/oauth_callback"
MINIO_IDENTITY_OPENID_CLAIM_NAME="groups"
```
</details>

### Redirection from OpenID Provider

Registered: Sun Nov 03 19:28:11 UTC 2024

- Last Modified: Wed Jul 10 20:16:44 UTC 2024

- 18.9K bytes

- Viewed (0)

github.com/istio/istio

cni/pkg/repair/repaircontroller.go

		return fmt.Errorf("get netns: %v", err)
	}
	log = log.WithLabels("netns", netns)

	if err := redirectRunningPod(pod, netns); err != nil {
		log.Errorf("failed to setup redirection: %v", err)
		m.With(resultLabel.Value(resultFail)).Increment()
		return err
	}
	c.repairedPods[key] = pod.UID
	log.Infof("pod repaired")
	m.With(resultLabel.Value(resultSuccess)).Increment()
	return nil

Registered: Wed Nov 06 22:53:10 UTC 2024

- Last Modified: Sat Feb 10 00:31:55 UTC 2024

- 10.4K bytes

- Viewed (0)

github.com/tiangolo/fastapi

fastapi/openapi/docs.py

    </body>
    </html>
    """
    return HTMLResponse(html)


def get_swagger_ui_oauth2_redirect_html() -> HTMLResponse:
    """
    Generate the HTML response with the OAuth2 redirection for Swagger UI.

    You normally don't need to use or change this.
    """
    # copied from https://github.com/swagger-api/swagger-ui/blob/v4.14.0/dist/oauth2-redirect.html
    html = """
    <!doctype html>

Registered: Sun Nov 03 07:19:11 UTC 2024

- Last Modified: Thu May 23 22:59:02 UTC 2024

- 10.1K bytes

- Viewed (0)

github.com/square/okhttp

mockwebserver/src/main/kotlin/mockwebserver3/MockResponse.kt

      }
      set(value) {
        val reason =
          when (value) {
            in 100..199 -> "Informational"
            in 200..299 -> "OK"
            in 300..399 -> "Redirection"
            in 400..499 -> "Client Error"
            in 500..599 -> "Server Error"
            else -> "Mock Response"
          }
        status = "HTTP/1.1 $value $reason"
      }

Registered: Fri Nov 01 11:42:11 UTC 2024

- Last Modified: Tue Jan 23 14:31:42 UTC 2024

- 13.3K bytes

- Viewed (0)

github.com/istio/istio

cni/README.md

- CAP_NET_RAW

## Ambient mode details

See [architecture doc](../architecture/ambient/ztunnel-cni-lifecycle.md).

## Reference

### Design details

Broadly, `istio-cni` accomplishes ambient redirection by instructing ztunnel to set up sockets within the application pod network namespace, where:

- one end of the socket is in the application pod
- and the other end is in ztunnel's pod

Registered: Wed Nov 06 22:53:10 UTC 2024

- Last Modified: Wed Jul 17 23:10:17 UTC 2024

- 10.5K bytes

- Viewed (0)

github.com/tiangolo/fastapi

fastapi/openapi/utils.py

            "items": {"$ref": REF_PREFIX + "ValidationError"},
        }
    },
}

status_code_ranges: Dict[str, str] = {
    "1XX": "Information",
    "2XX": "Success",
    "3XX": "Redirection",
    "4XX": "Client Error",
    "5XX": "Server Error",
    "DEFAULT": "Default Response",
}


def get_openapi_security_definitions(
    flat_dependant: Dependant,

Registered: Sun Nov 03 07:19:11 UTC 2024

- Last Modified: Tue Sep 17 18:54:10 UTC 2024

- 22.6K bytes

- Viewed (0)

github.com/istio/istio

istioctl/pkg/waypoint/waypoint.go

			// choose to do so.
			//
			// NOTE: This is a warning and not an error because the user may not intend to label their namespace as ambient.
			//
			// e.g. Users are handling ambient redirection per workload rather than at the namespace level.
			hasWaypoint, err := namespaceHasLabel(kubeClient, ns, label.IoIstioUseWaypoint.Name)
			if err != nil {
				return err
			}
			if enrollNamespace {

Registered: Wed Nov 06 22:53:10 UTC 2024

- Last Modified: Wed Oct 09 16:05:45 UTC 2024

- 19.6K bytes

- Viewed (0)

github.com/square/okhttp

mockwebserver-deprecated/src/test/java/okhttp3/mockwebserver/MockWebServerTest.kt

  }

  @Test
  fun setResponseMockReason() {
    val reasons =
      arrayOf(
        "Mock Response",
        "Informational",
        "OK",
        "Redirection",
        "Client Error",
        "Server Error",
        "Mock Response",
      )
    for (i in 0..599) {
      val response = MockResponse().setResponseCode(i)
      val expectedReason = reasons[i / 100]

Registered: Fri Nov 01 11:42:11 UTC 2024

- Last Modified: Mon Jan 08 01:13:22 UTC 2024

- 21.9K bytes

- Viewed (0)

github.com/square/okhttp

mockwebserver/src/test/java/mockwebserver3/MockWebServerTest.kt

  }

  @Test
  fun setResponseMockReason() {
    val reasons =
      arrayOf<String?>(
        "Mock Response",
        "Informational",
        "OK",
        "Redirection",
        "Client Error",
        "Server Error",
        "Mock Response",
      )
    for (i in 0..599) {
      val builder = MockResponse.Builder().code(i)
      val expectedReason = reasons[i / 100]

Registered: Fri Nov 01 11:42:11 UTC 2024

- Last Modified: Mon Jan 08 01:13:22 UTC 2024

- 23.5K bytes

- Viewed (0)

Search Options