- Sort Score
- Result 10 results
- Languages All
Results 1 - 2 of 2 for zOrder (0.13 sec)
-
cni/pkg/iptables/iptables.go
// and kubelet (skippable) traffic would have the same srcip once they got to the pod, and would be indistinguishable. // // Note that SortedList is used here because the istio sets class has no order guarantees, // and our unit tests will flake if rules have a nondeterministic ordering. // CLI: -t mangle -A ISTIO_PRERT -s 169.254.7.127 -p tcp -m tcp --dport <PROBEPORT> -j ACCEPT //
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue May 07 19:54:50 GMT 2024 - 19.7K bytes - Viewed (0) -
manifests/charts/istio-cni/templates/daemonset.yaml
- NET_ADMIN # CAP_NET_RAW is required to allow iptables mutation of the `nat` table - NET_RAW # CAP_SYS_ADMIN is required for both ambient and repair, in order to open # network namespaces in `/proc` to obtain descriptors for entering pod netnamespaces. # There does not appear to be a more granular capability for this. - SYS_ADMIN
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 9.4K bytes - Viewed (0)