s3cret - Code Search

manifests/charts/gateways/istio-ingress/templates/deployment.yaml

                fieldPath: spec.nodeName
          volumeMounts:
          - name: workload-socket
            mountPath: /var/run/secrets/workload-spiffe-uds
          - name: credential-socket
            mountPath: /var/run/secrets/credential-uds
          - name: workload-certs
            mountPath: /var/run/secrets/workload-spiffe-credentials
          - name: istio-envoy
            mountPath: /etc/istio/proxy

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 12.1K bytes

- Viewed (1)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/kube-gateway.yaml

          timeoutSeconds: 1
        volumeMounts:
        - name: workload-socket
          mountPath: /var/run/secrets/workload-spiffe-uds
        - name: credential-socket
          mountPath: /var/run/secrets/credential-uds
        {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
        - name: gke-workload-certificate
          mountPath: /var/run/secrets/workload-spiffe-credentials
          readOnly: true
        {{- else }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 19 15:10:43 GMT 2024

- 12.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/templates/clusterrole.yaml

  - apiGroups: ["gateway.networking.k8s.io"]
    resources: ["gatewayclasses"]
    verbs: ["create", "update", "patch", "delete"]

  # Needed for multicluster secret reading, possibly ingress certs in the future
  - apiGroups: [""]
    resources: ["secrets"]
    verbs: ["get", "watch", "list"]

  # Used for MCS serviceexport management
  - apiGroups: ["{{ $mcsAPIGroup }}"]
    resources: ["serviceexports"]

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 12 16:44:32 GMT 2024

- 5.7K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/base/crds/crd-all.gen.yaml

                                    type: string
                                  credentialName:
                                    description: The name of the secret that holds
                                      the TLS certs for the client including the CA
                                      certificates.
                                    type: string

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Mon Apr 22 20:20:47 GMT 2024

- 606.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-ingress/templates/role.yaml

    install.operator.istio.io/owning-resource: {{ .Values.ownerName | default "unknown" }}
    operator.istio.io/component: "IngressGateways"
rules:
- apiGroups: [""]
  resources: ["secrets"]
  verbs: ["get", "watch", "list"]

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 540 bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/files/injection-template.yaml

  {{ template "resources" . }}
    volumeMounts:
    - name: workload-socket
      mountPath: /var/run/secrets/workload-spiffe-uds
    - name: credential-socket
      mountPath: /var/run/secrets/credential-uds
    {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
    - name: gke-workload-certificate
      mountPath: /var/run/secrets/workload-spiffe-credentials
      readOnly: true
    {{- else }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 26 16:51:17 GMT 2024

- 23.7K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/injection-template.yaml

  {{ template "resources" . }}
    volumeMounts:
    - name: workload-socket
      mountPath: /var/run/secrets/workload-spiffe-uds
    - name: credential-socket
      mountPath: /var/run/secrets/credential-uds
    {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
    - name: gke-workload-certificate
      mountPath: /var/run/secrets/workload-spiffe-credentials
      readOnly: true
    {{- else }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 26 16:51:17 GMT 2024

- 23.7K bytes

- Viewed (1)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/waypoint.yaml

        volumeMounts:
        - name: workload-socket
          mountPath: /var/run/secrets/workload-spiffe-uds
        - mountPath: /var/run/secrets/istio
          name: istiod-ca-cert
        - mountPath: /var/lib/istio/data
          name: istio-data
        - mountPath: /etc/istio/proxy
          name: istio-envoy
        - mountPath: /var/run/secrets/tokens
          name: istio-token

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri May 03 19:29:42 GMT 2024

- 10.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/templates/reader-clusterrole.yaml

      - "extensions.istio.io"
    resources: ["*"]
    verbs: ["get", "list", "watch"]
  - apiGroups: [""]
    resources: ["endpoints", "pods", "services", "nodes", "replicationcontrollers", "namespaces", "secrets"]
    verbs: ["get", "list", "watch"]
  - apiGroups: ["networking.istio.io"]
    verbs: [ "get", "watch", "list" ]
    resources: [ "workloadentries" ]
  - apiGroups: ["networking.x-k8s.io", "gateway.networking.k8s.io"]

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Tue Apr 02 08:32:06 GMT 2024

- 2.2K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/templates/clusterrole.yaml

  - apiGroups: ["gateway.networking.k8s.io"]
    resources: ["gatewayclasses"]
    verbs: ["create", "update", "patch", "delete"]

  # Needed for multicluster secret reading, possibly ingress certs in the future
  - apiGroups: [""]
    resources: ["secrets"]
    verbs: ["get", "watch", "list"]

  # Used for MCS serviceexport management
  - apiGroups: ["{{ $mcsAPIGroup }}"]
    resources: ["serviceexports"]

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 12 16:44:32 GMT 2024

- 5.8K bytes

- Viewed (0)

Search Options