- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 12 for So (0.26 sec)
-
cni/pkg/nodeagent/net.go
log.Debug("notifying subscribed node proxies") if err := s.sendPodToZtunnelAndWaitForAck(ctx, pod, openNetns); err != nil { // we must return PartialAdd error here. the pod was injected with iptables rules, // so it should be annotated, so if it is removed from the mesh, the rules will be removed. // alternatively, we may not return an error at all, but we want this to fail on tests. return NewErrPartialAdd(err) } return nil }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 12.2K bytes - Viewed (1) -
cni/pkg/nodeagent/server.go
// Note that if the ipset already exist by name, Create will not return an error. // // We will unconditionally flush our set before use here, so it shouldn't matter. func createHostsideProbeIpset(isV6 bool) (ipset.IPSet, error) { linDeps := ipset.RealNlDeps() probeSet, err := ipset.NewIPSet(iptables.ProbeIPSet, isV6, linDeps) if err != nil {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 7.2K bytes - Viewed (0) -
cni/pkg/iptables/iptables.go
// so that it could distinguish things that can be unauthenticated (healthchecks) from other kinds of node traffic // (e.g. LoadBalanced Service packets, etc) that need to be authenticated/captured/proxied. // // We want to do the same thing in ambient but can't rely on podSpec injection. So, do effectively the same thing,
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue May 07 19:54:50 GMT 2024 - 19.7K bytes - Viewed (0) -
cni/pkg/nodeagent/net_test.go
ObjectMeta: metav1.ObjectMeta{ Name: "foo", Namespace: "bar", UID: "123", }, Spec: corev1.PodSpec{ServiceAccountName: "sa"}, } // this is usually called after add. so manually add the pod uid for now fakens := newFakeNs(123) closed := fakens.closed workload := WorkloadInfo{ Workload: podToWorkload(pod), Netns: fakens, }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 16.4K bytes - Viewed (0) -
cni/pkg/nodeagent/informers.go
s.pods.AddEventHandler(controllers.FromEventHandler(func(o controllers.Event) { s.queue.Add(o) })) // Namespaces could be anything though, so we watch all of those // // NOTE that we are requeueing namespaces here explicitly to work around // test flakes with the fake kube client in `pkg/kube/client.go` -
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 9.6K bytes - Viewed (0) -
cni/pkg/ipset/ipset.go
ipToInsert := ip.Unmap() // We have already Unmap'd, so we can do a simple IsV6 y/n check now if ipToInsert.Is6() { return m.Deps.addIP(m.V6Name, ipToInsert, ipProto, comment, replace) } return m.Deps.addIP(m.V4Name, ipToInsert, ipProto, comment, replace) } func (m *IPSet) DeleteIP(ip netip.Addr, ipProto uint8) error { ipToDel := ip.Unmap() // We have already Unmap'd, so we can do a simple IsV6 y/n check now if ipToDel.Is6() {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 3.9K bytes - Viewed (0) -
istioctl/pkg/waypoint/waypoint.go
// If they don't, the user will be warned and be presented with the command to label their namespace as ambient if they // choose to do so. // // NOTE: This is a warning and not an error because the user may not intend to label their namespace as ambient. // // e.g. Users are handling ambient redirection per workload rather than at the namespace level.
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed May 08 19:45:58 GMT 2024 - 15.5K bytes - Viewed (0) -
cni/pkg/util/podutil.go
Patch( context.Background(), pod.Name, types.MergePatchType, annotationPatch, metav1.PatchOptions{}, // Both "pods" and "pods/status" can mutate the metadata. However, pods/status is lower privilege, so we use that instead. "status", ) return err } func AnnotateUnenrollPod(client kubernetes.Interface, pod *metav1.ObjectMeta) error {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 3.9K bytes - Viewed (0) -
cni/pkg/nodeagent/options.go
// APIPA/"link-local" IP. // // It doesn't matter what this IP is, so long as it's not routable and doesn't collide with anything else. // // IPv6 link local ranges are designed to be collision-resistant by default, and so probably never need to be overridden DefaultHostProbeSNATIP = "169.254.7.127" DefaultHostProbeSNATIPV6 = "fd16:9254:7127:1337:ffff:ffff:ffff:ffff" )
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 2K bytes - Viewed (0) -
cni/pkg/nodeagent/cni-watcher_test.go
dpServer := &meshDataplane{ kubeClient: client.Kube(), netServer: fs, } handlers := setupHandlers(ctx, client, dpServer, "istio-system") // We are not going to start the server, so the sockpath is irrelevant pluginServer := startCniPluginServer(ctx, "/tmp/test.sock", handlers, dpServer) // label the namespace labelsPatch := []byte(fmt.Sprintf(`{"metadata":{"labels":{"%s":"%s"}}}`,
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu May 02 21:29:40 GMT 2024 - 5.4K bytes - Viewed (0)