- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 10 for Burles (0.3 sec)
-
cni/pkg/nodeagent/net.go
} // pod is removed from the mesh, but is still running. remove iptables rules log.Debugf("calling DeleteInpodRules.") if err := s.netnsRunner(openNetns, func() error { return s.iptablesConfigurator.DeleteInpodRules() }); err != nil { log.Errorf("failed to delete inpod rules %v", err) return fmt.Errorf("failed to delete inpod rules %w", err) }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 12.2K bytes - Viewed (1) -
cni/pkg/nodeagent/server.go
} // Create hostprobe rules now, in the host netns // Later we will reuse this same configurator inside the pod netns for adding other rules iptablesConfigurator.DeleteHostRules() if err := iptablesConfigurator.CreateHostRulesForHealthChecks(&HostProbeSNATIP, &HostProbeSNATIPV6); err != nil { return nil, fmt.Errorf("error initializing the host rules for health checks: %w", err) }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 7.2K bytes - Viewed (0) -
cni/pkg/iptables/iptables.go
// Append our rules here builder := cfg.appendHostRules(hostSNATIP, hostSNATIPV6) log.Info("Adding host netnamespace iptables rules") if err := cfg.executeCommands(builder); err != nil { log.Errorf("failed to add host netnamespace iptables rules: %v", err) return err } return nil }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue May 07 19:54:50 GMT 2024 - 19.7K bytes - Viewed (0) -
cni/pkg/nodeagent/net_test.go
err := netServer.DelPodFromMesh(ctx, pod) assert.NoError(t, err) assert.Equal(t, ztunnelServer.deletedPods.Load(), 1) // with delete iptables is not called, as there is no need to delete the iptables rules // from a pod that's gone from the cluster. assert.Equal(t, nlDeps.DelInpodMarkIPRuleCnt.Load(), 0) assert.Equal(t, nlDeps.DelLoopbackRoutesCnt.Load(), 0) // make sure the uid was taken from cache and netns closed
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 16.4K bytes - Viewed (0) -
istioctl/pkg/authz/analyzer_test.go
}, ClientStatus: 453, }, }, } for _, tt := range tests { t.Run(tt.name, func(t *testing.T) { var buf bytes.Buffer a.Print(&buf) expectedOutput := "ACTION AuthorizationPolicy RULES\n" actualOutput := buf.String() if !reflect.DeepEqual(expectedOutput, actualOutput) { t.Errorf("Found %v, wanted %v", actualOutput, expectedOutput) } }) }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Sun Apr 21 17:42:54 GMT 2024 - 2.8K bytes - Viewed (0) -
cni/pkg/iptables/iptables_linux.go
inpodMarkRule.Family = family inpodMarkRule.Table = RouteTableInbound inpodMarkRule.Mark = InpodTProxyMark inpodMarkRule.Mask = InpodTProxyMask inpodMarkRule.Priority = 32764 rules = append(rules, inpodMarkRule) } for _, rule := range rules { log.Debugf("Iterating netlink rule : %+v", rule) if err := f(rule); err != nil { return fmt.Errorf("failed to configure netlink rule: %w", err) } } return nil }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 3.3K bytes - Viewed (0) -
cni/pkg/ipset/ipset.go
// superset of type `list:set` - we can then query the superset directly in iptables (with the same rule), // and iptables will be smart enough to pick the correct underlying set (v4 or v6, based on context), // reducing the # of rules we need. // // BUT netlink lib doesn't support adding things to `list:set` types yet, and current tagged release // doesn't support creating `list:set` types yet (is in main branch tho).
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 3.9K bytes - Viewed (0) -
istioctl/pkg/describe/describe.go
if httpFilter.Name == wellknown.HTTPRoleBasedAccessControl { rbac := &rbachttp.RBAC{} if err := httpFilter.GetTypedConfig().UnmarshalTo(rbac); err == nil { policies := []string{} for polName := range rbac.Rules.Policies { policies = append(policies, polName) } return policies, nil } } } return []string{}, nil }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Sat Apr 13 05:23:38 GMT 2024 - 50.4K bytes - Viewed (0) -
istioctl/pkg/writer/ztunnel/configdump/api.go
type ZtunnelPolicy struct { Name string `json:"name"` Namespace string `json:"namespace"` Scope string `json:"scope"` Action string `json:"action"` Rules [][][]*PolicyMatch `json:"rules"` } type ZtunnelDump struct { Workloads map[string]*ZtunnelWorkload `json:"workloads"` Services map[string]*ZtunnelService `json:"services"`
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 25 02:16:06 GMT 2024 - 5.2K bytes - Viewed (0) -
operator/cmd/mesh/manifest-generate_test.go
webhooks: - name: sidecar-injector.istio.io clientConfig: service: name: istiod namespace: istio-system path: "/inject" sideEffects: None rules: - operations: [ "CREATE" ] apiGroups: [""] apiVersions: ["v1"] resources: ["pods"] failurePolicy: Fail admissionReviewVersions: ["v1beta1", "v1"] namespaceSelector:
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 18 18:16:49 GMT 2024 - 43.5K bytes - Viewed (0)