- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 10 for rebawl (0.2 sec)
-
architecture/ambient/ztunnel.md
## Background and motivation Motivations to implement ztunnel generally came from two areas. First, and most importantly, it serves as a means to implement the real goal: waypoints. For various reasons outside the scope of this document, there is a desire to move from a sidecar based architecture to a "remote proxy" architecture.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 25 22:35:16 GMT 2024 - 16.6K bytes - Viewed (0) -
operator/cmd/mesh/testdata/manifest-generate/data-snapshot.tar.gz
secretName: istio-egressgateway-ca-certs mountPath: /etc/istio/egressgateway-ca-certs configVolumes: [] additionalContainers: [] serviceAccount: # Annotations to add to the service account annotations: {} ### Advanced options ########## # TODO: convert to real options, env should not be exposed env: {} # Set this to "external" if and only if you want the egress gateway to # act as a transparent SNI gateway that routes mTLS/TLS traffic to # external services defined using service entries, where the service...
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Jan 10 05:10:03 GMT 2024 - 198.1K bytes - Viewed (1) -
cni/pkg/pluginlistener/listener.go
} // Attempt to create the folder in case it doesn't exist if err := os.MkdirAll(filepath.Dir(path), 0o750); err != nil { // If we cannot create it, just warn here - we will fail later if there is a real error log.Warnf("Failed to create directory for %v: %v", path, err) } var err error listener, err := net.Listen("unix", path) if err != nil {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 1.7K bytes - Viewed (0) -
common-protos/k8s.io/api/core/v1/generated.proto
// kubelet. If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the // connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept // the actual log data coming from the real kubelet). // +optional optional bool insecureSkipTLSVerifyBackend = 9; }
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 255.8K bytes - Viewed (0) -
istioctl/pkg/authz/authz.go
} return envoyConfig, nil } // AuthZ groups commands used for inspecting and interacting the authorization policy. // Note: this is still under active development and is not ready for real use. func AuthZ(ctx cli.Context) *cobra.Command { cmd := &cobra.Command{ Use: "authz", Short: "Inspect Istio AuthorizationPolicy", } cmd.AddCommand(checkCmd(ctx))
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Sat Apr 13 05:23:38 GMT 2024 - 5K bytes - Viewed (0) -
common-protos/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto
// For example: the master will return an internal IP CIDR only, if the client reaches the server using an internal IP. // Server looks at X-Forwarded-For header or X-Real-Ip header or request.RemoteAddr (in that order) to get the client IP. // +optional repeated ServerAddressByClientCIDR serverAddressByClientCIDRs = 4; }
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 53.3K bytes - Viewed (0) -
cni/pkg/plugin/cnieventclient_test.go
Interface: &fakeIDX, Address: net.IPNet{ IP: fakeIP, }, Gateway: fakeGW, } ) func TestPushCNIAddEventSucceed(t *testing.T) { // Fake out a test HTTP server and use that instead of a real HTTP server over gRPC to validate req/resp flows testServer := httptest.NewServer(http.HandlerFunc(func(res http.ResponseWriter, req *http.Request) { res.WriteHeader(http.StatusOK) res.Write([]byte("server happy")) }))
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 4.2K bytes - Viewed (0) -
istioctl/pkg/wait/wait_test.go
ns := action.GetNamespace() watch, err := fc.Tracker().Watch(gvr, ns) if err != nil { return false, nil, err } // Kubernetes Fake watches do not add initial state, but real server does // https://kubernetes.io/docs/reference/using-api/api-concepts/#semantics-for-watch // Tracking in https://github.com/kubernetes/kubernetes/issues/123109 gvk := gvk.MustFromGVR(gvr).Kubernetes()
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Mar 15 08:28:50 GMT 2024 - 6.8K bytes - Viewed (1) -
manifests/charts/gateways/istio-egress/values.yaml
additionalContainers: [] serviceAccount: # Annotations to add to the service account annotations: {} ### Advanced options ############ # TODO: convert to real options, env should not be exposed env: {} # Set this to "external" if and only if you want the egress gateway to # act as a transparent SNI gateway that routes mTLS/TLS traffic to
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Feb 27 16:55:16 GMT 2024 - 12.4K bytes - Viewed (0) -
istioctl/pkg/workload/workload.go
return err } serviceAccount := wg.Spec.Template.ServiceAccount tokenPath := filepath.Join(dir, "istio-token") token := &authenticationv1.TokenRequest{ // ObjectMeta isn't required in real k8s, but needed for tests ObjectMeta: metav1.ObjectMeta{ Name: serviceAccount, Namespace: wg.Namespace, }, Spec: authenticationv1.TokenRequestSpec{ Audiences: []string{"istio-ca"},
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Apr 17 20:06:41 GMT 2024 - 25.5K bytes - Viewed (0)