- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 67 for workload (0.34 sec)
-
architecture/ambient/peer-authentication.md
particular, ztunnel only supports 2 (custom) xDS resources: [`Workload`](../../pkg/workloadapi/workload.proto) and [`Authorization`](../../pkg/workloadapi/security/authorization.proto). As such, ztunnel does not receive `PeerAuthentication`s directly; when istiod detects a `PeerAuthentication` resource that targets an Ambient captured workload, it computes the effective policy for that workload (taking into account the mesh-wide -> namespace -> workload precedence rules) and sends that policy to ztunnel. The...
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Aug 09 22:09:18 GMT 2023 - 3.9K bytes - Viewed (0) -
architecture/ambient/ztunnel.md
However, one interesting aspect is how these policies associate with workloads. Istio's AuthorizationPolicy has label selectors. However, we intentionally do not send those as part of the Workload API, in order to keep the size low. The obvious solution to this is to put the list of selected workloads into the policy itself. However, this means anytime a workload changes (often), we need to update the policy.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 25 22:35:16 GMT 2024 - 16.6K bytes - Viewed (0) -
architecture/security/istio-agent.md
* If a socket is found, istio-agent will not start its own SDS Server and Envoy will be configured to use that socket as its source of cryptographic material.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Aug 22 16:45:50 GMT 2023 - 7.2K bytes - Viewed (1) -
istioctl/pkg/workload/testdata/vmconfig-nil-proxy-metadata/cluster.env.golden
ISTIO_METAJSON_LABELS='{"service.istio.io/canonical-name":"foo","service.istio.io/canonical-revision":"latest"}' ISTIO_META_CLUSTER_ID='Kubernetes' ISTIO_META_DNS_CAPTURE='true' ISTIO_META_MESH_ID='' ISTIO_META_NETWORK='' ISTIO_META_WORKLOAD_NAME='foo' ISTIO_NAMESPACE='bar' ISTIO_SERVICE='foo.bar' ISTIO_SERVICE_CIDR='*' ISTIO_SVC_IP='10.10.10.10' POD_NAMESPACE='bar' SERVICE_ACCOUNT='vm-serviceaccount'
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Jun 15 15:02:17 GMT 2023 - 546 bytes - Viewed (0) -
istioctl/pkg/workload/testdata/vmconfig-nil-proxy-metadata/mesh.yaml.golden
defaultConfig: proxyMetadata: CANONICAL_REVISION: latest CANONICAL_SERVICE: foo ISTIO_META_CLUSTER_ID: Kubernetes ISTIO_META_DNS_CAPTURE: "true" ISTIO_META_MESH_ID: "" ISTIO_META_NETWORK: "" ISTIO_META_WORKLOAD_NAME: foo ISTIO_METAJSON_LABELS: '{"service.istio.io/canonical-name":"foo","service.istio.io/canonical-revision":"latest"}' POD_NAMESPACE: bar SERVICE_ACCOUNT: vm-serviceaccount TRUST_DOMAIN: ""
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Jun 15 15:02:17 GMT 2023 - 500 bytes - Viewed (0) -
istioctl/pkg/workload/testdata/vmconfig/ipv6/mesh.yaml.golden
CANONICAL_SERVICE: foo CLUSTER_MESH_CONFIG_VALUE: foo ISTIO_META_CLUSTER_ID: Kubernetes ISTIO_META_DNS_CAPTURE: "true" ISTIO_META_MESH_ID: "" ISTIO_META_NETWORK: "" ISTIO_META_WORKLOAD_NAME: foo ISTIO_METAJSON_LABELS: '{"service.istio.io/canonical-name":"foo","service.istio.io/canonical-revision":"latest"}' POD_NAMESPACE: bar PROXY_CONFIG_ANNOT_VALUE: bar SERVICE_ACCOUNT: vm-serviceaccount
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Jun 15 15:02:17 GMT 2023 - 625 bytes - Viewed (0) -
istioctl/pkg/workload/testdata/vmconfig/ipv4/mesh.yaml.golden
CANONICAL_SERVICE: foo CLUSTER_MESH_CONFIG_VALUE: foo ISTIO_META_CLUSTER_ID: Kubernetes ISTIO_META_DNS_CAPTURE: "true" ISTIO_META_MESH_ID: "" ISTIO_META_NETWORK: "" ISTIO_META_WORKLOAD_NAME: foo ISTIO_METAJSON_LABELS: '{"service.istio.io/canonical-name":"foo","service.istio.io/canonical-revision":"latest"}' POD_NAMESPACE: bar PROXY_CONFIG_ANNOT_VALUE: bar SERVICE_ACCOUNT: vm-serviceaccount
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Jun 15 15:02:17 GMT 2023 - 625 bytes - Viewed (0) -
istioctl/pkg/workload/testdata/vmconfig/ipv6/cluster.env.golden
ISTIO_METAJSON_LABELS='{"service.istio.io/canonical-name":"foo","service.istio.io/canonical-revision":"latest"}' ISTIO_META_CLUSTER_ID='Kubernetes' ISTIO_META_DNS_CAPTURE='true' ISTIO_META_MESH_ID='' ISTIO_META_NETWORK='' ISTIO_META_WORKLOAD_NAME='foo' ISTIO_NAMESPACE='bar' ISTIO_SERVICE='foo.bar' ISTIO_SERVICE_CIDR='*' ISTIO_SVC_IP='fd00:10:96::1' POD_NAMESPACE='bar' PROXY_CONFIG_ANNOT_VALUE='bar' SERVICE_ACCOUNT='vm-serviceaccount'
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Jun 15 15:02:17 GMT 2023 - 657 bytes - Viewed (0) -
istioctl/pkg/workload/testdata/vmconfig/ipv4/cluster.env.golden
ISTIO_METAJSON_LABELS='{"service.istio.io/canonical-name":"foo","service.istio.io/canonical-revision":"latest"}' ISTIO_META_CLUSTER_ID='Kubernetes' ISTIO_META_DNS_CAPTURE='true' ISTIO_META_MESH_ID='' ISTIO_META_NETWORK='' ISTIO_META_WORKLOAD_NAME='foo' ISTIO_NAMESPACE='bar' ISTIO_SERVICE='foo.bar' ISTIO_SERVICE_CIDR='*' ISTIO_SVC_IP='10.10.10.10' POD_NAMESPACE='bar' PROXY_CONFIG_ANNOT_VALUE='bar' SERVICE_ACCOUNT='vm-serviceaccount'
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Jun 15 15:02:17 GMT 2023 - 655 bytes - Viewed (0) -
docs/minio-limits.md
> NOTE: While MinIO does not implement an upper boundary on buckets, your cluster's hardware has natural limits that depend on the workload and its scaling patterns. We strongly recommend [MinIO SUBNET](https://min.io/pricing) for architecture and sizing guidance for your production use case. ## List of Amazon S3 API's not supported on MinIO
Plain Text - Registered: Sun May 05 19:28:20 GMT 2024 - Last Modified: Thu Jan 18 07:03:17 GMT 2024 - 5.9K bytes - Viewed (0)