- Sort Score
- Result 10 results
- Languages All
Results 1 - 3 of 3 for moving (0.14 sec)
-
architecture/ambient/ztunnel.md
Next, we terminate the CONNECT. From the [headers](#headers), we know the target destination. If the target destination has a waypoint, we enforce that the request is coming from that waypoint. Otherwise, the request is rejected. If there is no waypoint, ztunnel will enforce RBAC policies against the request.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 25 22:35:16 GMT 2024 - 16.6K bytes - Viewed (0) -
cni/pkg/iptables/iptables.go
"-j", "CONNMARK", "--set-xmark", inpodTproxyMark) // Handle healthcheck probes from the host node. In the host netns, before the packet enters the pod, we SNAT // the healthcheck packet to a fixed IP if the packet is coming from a node-local process with a socket. // // We do this so we can exempt this traffic from ztunnel capture/proxy - otherwise both kube-proxy (legit)
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue May 07 19:54:50 GMT 2024 - 19.7K bytes - Viewed (0) -
cni/pkg/util/podutil.go
// otherwise fallback to 'PodIP'. // // Note that very early in the pod's lifecycle (before all the node CNI plugin invocations finish) // K8S may not have received the pod IPs yet, and may not report the pod as having any. func GetPodIPsIfPresent(pod *corev1.Pod) []netip.Addr { var podIPs []netip.Addr if len(pod.Status.PodIPs) != 0 { for _, pip := range pod.Status.PodIPs { ip := netip.MustParseAddr(pip.IP)
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 3.9K bytes - Viewed (0)