secrets - Code Search

istioctl/pkg/multicluster/remote_secret.go

	return saName + "-istio-remote-secret-token"
}

func secretReferencesServiceAccount(serviceAccount *v1.ServiceAccount, secret *v1.Secret) error {
	if secret.Type != v1.SecretTypeServiceAccountToken ||
		secret.Annotations[v1.ServiceAccountNameKey] != serviceAccount.Name {
		return fmt.Errorf("secret %s/%s does not reference ServiceAccount %s",
			secret.Namespace, secret.Name, serviceAccount.Name)
	}
	return nil
}

Go

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Wed Oct 11 01:43:17 GMT 2023

- 24K bytes

- Viewed (0)

github.com/istio/istio

istioctl/pkg/multicluster/remote_secret_test.go

	testServiceAccountName = "test-service-account"
)

func makeServiceAccount(secrets ...string) *v1.ServiceAccount {
	sa := &v1.ServiceAccount{
		ObjectMeta: metav1.ObjectMeta{
			Name:      testServiceAccountName,
			Namespace: testNamespace,
		},
	}

	for _, secret := range secrets {
		sa.Secrets = append(sa.Secrets, v1.ObjectReference{
			Name:      secret,
			Namespace: testNamespace,
		})
	}

	return sa
}

Go

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Tue Oct 31 14:48:28 GMT 2023

- 20.6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-egress/templates/deployment.yaml

          volumeMounts:
          - name: workload-socket
            mountPath: /var/run/secrets/workload-spiffe-uds
          - name: credential-socket
            mountPath: /var/run/secrets/credential-uds
          - name: workload-certs
            mountPath: /var/run/secrets/workload-spiffe-credentials
          - name: istio-envoy
            mountPath: /etc/istio/proxy

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 12.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/grpc-agent.yaml

    volumeMounts:
    - name: workload-socket
      mountPath: /var/run/secrets/workload-spiffe-uds
    {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
    - name: gke-workload-certificate
      mountPath: /var/run/secrets/workload-spiffe-credentials
      readOnly: true
    {{- else }}
    - name: workload-certs
      mountPath: /var/run/secrets/workload-spiffe-credentials
    {{- end }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 26 16:51:17 GMT 2024

- 12.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-ingress/templates/deployment.yaml

          volumeMounts:
          - name: workload-socket
            mountPath: /var/run/secrets/workload-spiffe-uds
          - name: credential-socket
            mountPath: /var/run/secrets/credential-uds
          - name: workload-certs
            mountPath: /var/run/secrets/workload-spiffe-credentials
          - name: istio-envoy
            mountPath: /etc/istio/proxy

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 12.1K bytes

- Viewed (1)

github.com/istio/istio

manifests/charts/istiod-remote/files/injection-template.yaml

    volumeMounts:
    - name: workload-socket
      mountPath: /var/run/secrets/workload-spiffe-uds
    - name: credential-socket
      mountPath: /var/run/secrets/credential-uds
    {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
    - name: gke-workload-certificate
      mountPath: /var/run/secrets/workload-spiffe-credentials
      readOnly: true
    {{- else }}
    - name: workload-certs

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 26 16:51:17 GMT 2024

- 23.7K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/injection-template.yaml

    volumeMounts:
    - name: workload-socket
      mountPath: /var/run/secrets/workload-spiffe-uds
    - name: credential-socket
      mountPath: /var/run/secrets/credential-uds
    {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
    - name: gke-workload-certificate
      mountPath: /var/run/secrets/workload-spiffe-credentials
      readOnly: true
    {{- else }}
    - name: workload-certs

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 26 16:51:17 GMT 2024

- 23.7K bytes

- Viewed (1)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/kube-gateway.yaml

        volumeMounts:
        - name: workload-socket
          mountPath: /var/run/secrets/workload-spiffe-uds
        - name: credential-socket
          mountPath: /var/run/secrets/credential-uds
        {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
        - name: gke-workload-certificate
          mountPath: /var/run/secrets/workload-spiffe-credentials
          readOnly: true
        {{- else }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 19 15:10:43 GMT 2024

- 12.1K bytes

- Viewed (0)

github.com/minio/minio

helm/minio/templates/statefulset.yaml

      {{- end }}
      {{- end }}
      volumes:
        - name: minio-user
          secret:
            secretName: {{ template "minio.secretName" . }}
        {{- if .Values.extraSecret }}
        - name: extra-secret
          secret:
            secretName: {{ .Values.extraSecret }}
        {{- end }}
        {{- include "minio.tlsKeysVolume" . | indent 8 }}

Others

- Registered: Sun May 05 19:28:20 GMT 2024

- Last Modified: Fri Apr 26 07:50:24 GMT 2024

- 10.7K bytes

- Viewed (0)

github.com/istio/istio

istioctl/pkg/workload/workload_test.go

					Data: map[string]string{
						"mesh": string(util.ReadFile(t, path.Join(testdir, "meshconfig.yaml"))),
					},
				}, metav1.CreateOptions{})
				client.Kube().CoreV1().Secrets("bar").Create(context.Background(), &v1.Secret{
					ObjectMeta: metav1.ObjectMeta{Namespace: "bar", Name: "test"},
					Data: map[string][]byte{
						"token": {},
					},
				}, metav1.CreateOptions{})
			}

Go

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Wed Mar 27 16:59:05 GMT 2024

- 14.6K bytes

- Viewed (0)

Search Options