Search Options

Results per page
Sort
Preferred Languages
Advance

Results 1 - 10 of 15 for dropCR (0.16 sec)

  2. github.com/istio/istio

    manifests/charts/gateway/templates/deployment.yaml 

              securityContext:
          {{- if .Values.containerSecurityContext }}
            {{- toYaml .Values.containerSecurityContext | nindent 12 }}
          {{- else }}
            capabilities:
              drop:
              - ALL
            allowPrivilegeEscalation: false
            privileged: false
            readOnlyRootFilesystem: true
            {{- if not (eq .Values.platform "openshift") }}
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Thu Apr 18 18:16:49 GMT 2024
    - 3.5K bytes
    - Viewed (0)
  3. github.com/istio/istio

    manifests/charts/istio-control/istio-discovery/files/kube-gateway.yaml 

              capabilities:
            drop:
            - ALL
          allowPrivilegeEscalation: false
          privileged: false
          readOnlyRootFilesystem: true
          runAsUser: {{ .ProxyUID | default "1337" }}
          runAsGroup: {{ .ProxyGID | default "1337" }}
          runAsNonRoot: true
        {{- else }}
          capabilities:
            drop:
            - ALL
            add:
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Fri Apr 19 15:10:43 GMT 2024
    - 12.1K bytes
    - Viewed (0)
  4. github.com/istio/istio

    manifests/charts/gateways/istio-ingress/templates/deployment.yaml 

            {{- end }}
        {{- if not $gateway.runAsRoot }}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            privileged: false
            readOnlyRootFilesystem: true
        {{- end }}
          readinessProbe:
            failureThreshold: 30
            httpGet:
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Thu Apr 18 18:16:49 GMT 2024
    - 12.1K bytes
    - Viewed (1)
  5. github.com/istio/istio

    manifests/charts/istio-control/istio-discovery/files/waypoint.yaml 

              successThreshold: 1
          timeoutSeconds: 1
        securityContext:
          privileged: false
          runAsGroup: 1337
          runAsUser: 0
          capabilities:
            drop:
            - ALL
        volumeMounts:
        - name: workload-socket
          mountPath: /var/run/secrets/workload-spiffe-uds
        - mountPath: /var/run/secrets/istio
          name: istiod-ca-cert
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Fri May 03 19:29:42 GMT 2024
    - 10.1K bytes
    - Viewed (0)
  6. github.com/istio/istio

    operator/cmd/mesh/testdata/manifest-generate/data-snapshot.tar.gz 

    }} {{- else if (semverCompare ">=1.22-0" .Capabilities.KubeVersion.GitVersion) }} # Safe since 1.22: https://github.com/kubernetes/kubernetes/pull/103326 capabilities: drop: - ALL allowPrivilegeEscala: false privileged: false readOnlyRootFilesyst: true runAsUser: 1337 runAsGroup: 1337 runAsNonRoot: true {{- else }} capabilities: drop: - ALL add: - NET_BIND_SERVICE runAsUser: 0 runAsGroup: 1337 runAsNonRoot: false allowPrivilegeEscala: true readOnlyRootFilesyst: true {{- end }} env: {{- with .Values.networkGateway...
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Wed Jan 10 05:10:03 GMT 2024
    - 198.1K bytes
    - Viewed (1)
  7. github.com/istio/istio

    manifests/charts/istio-operator/templates/deployment.yaml 

              - --monitoring-port={{ .Values.operator.monitoring.port }}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            privileged: false
            readOnlyRootFilesystem: true
            runAsNonRoot: true
{{- if .Values.operator.seccompProfile }}
            seccompProfile:
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Fri Aug 25 19:10:42 GMT 2023
    - 2.6K bytes
    - Viewed (0)
  8. github.com/istio/istio

    manifests/charts/istiod-remote/files/injection-template.yaml 

          capabilities:
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
        add:
        - NET_ADMIN
        - NET_RAW
    {{- end }}
        drop:
        - ALL
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
      readOnlyRootFilesystem: false
      runAsGroup: 0
      runAsNonRoot: false
      runAsUser: 0
    {{- else }}
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Fri Apr 26 16:51:17 GMT 2024
    - 23.7K bytes
    - Viewed (0)
  9. github.com/istio/istio

    manifests/charts/istio-control/istio-discovery/files/injection-template.yaml 

          capabilities:
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
        add:
        - NET_ADMIN
        - NET_RAW
    {{- end }}
        drop:
        - ALL
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
      readOnlyRootFilesystem: false
      runAsGroup: 0
      runAsNonRoot: false
      runAsUser: 0
    {{- else }}
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Fri Apr 26 16:51:17 GMT 2024
    - 23.7K bytes
    - Viewed (1)
  10. github.com/istio/istio

    manifests/charts/gateways/istio-ingress/templates/injected-deployment.yaml 

                  protocol: TCP
              name: http-envoy-prom
        {{- if not $gateway.runAsRoot }}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            privileged: false
            readOnlyRootFilesystem: true
        {{- end }}
          resources:
{{- if $gateway.resources }}
{{ toYaml $gateway.resources | indent 12 }}
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Thu Apr 18 18:16:49 GMT 2024
    - 5K bytes
    - Viewed (0)
  11. github.com/istio/istio

    manifests/charts/gateways/istio-egress/templates/injected-deployment.yaml 

                  protocol: TCP
              name: http-envoy-prom
        {{- if not $gateway.runAsRoot }}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            privileged: false
            readOnlyRootFilesystem: true
        {{- end }}
          resources:
{{- if $gateway.resources }}
{{ toYaml $gateway.resources | indent 12 }}
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Thu Apr 18 18:16:49 GMT 2024
    - 5K bytes
    - Viewed (0)
Back to top