capabilities - Code Search

cni/test/testdata/pre/nover_calico.conflist

      "policy": {
        "type": "k8s"
      },
      "kubernetes": {
        "kubeconfig": "/etc/cni/net.d/calico-kubeconfig"
      }
    },
    {
      "type": "portmap",
      "snat": true,
      "capabilities": {
        "portMappings": true
      }
    }
  ]

Plain Text

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Nov 19 23:19:19 GMT 2020

- 496 bytes

- Viewed (0)

github.com/istio/istio

cni/test/testdata/pre/noplugins_calico.conflist

      "policy": {
        "type": "k8s"
      },
      "kubernetes": {
        "kubeconfig": "/etc/cni/net.d/calico-kubeconfig"
      }
    },
    {
      "type": "portmap",
      "snat": true,
      "capabilities": {
        "portMappings": true
      }
    }
  ]

Plain Text

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Nov 19 23:19:19 GMT 2020

- 520 bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateway/templates/deployment.yaml

          {{- end }}
          securityContext:
          {{- if .Values.containerSecurityContext }}
            {{- toYaml .Values.containerSecurityContext | nindent 12 }}
          {{- else }}
            capabilities:
              drop:
              - ALL
            allowPrivilegeEscalation: false
            privileged: false
            readOnlyRootFilesystem: true
            {{- if not (eq .Values.platform "openshift") }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 3.5K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/kube-gateway.yaml

          capabilities:
            drop:
            - ALL
          allowPrivilegeEscalation: false
          privileged: false
          readOnlyRootFilesystem: true
          runAsUser: {{ .ProxyUID | default "1337" }}
          runAsGroup: {{ .ProxyGID | default "1337" }}
          runAsNonRoot: true
        {{- else }}
          capabilities:
            drop:
            - ALL

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 19 15:10:43 GMT 2024

- 12.1K bytes

- Viewed (0)

github.com/istio/istio

cni/test/testdata/pre/calico.conflist

        "kubeconfig": "/etc/cni/net.d/calico-kubeconfig"
      },
      "log_level": "info",
      "mtu": 1500,
      "policy": {
        "type": "k8s"
      },
      "type": "calico"
    },
    {
      "capabilities": {
        "portMappings": true
      },
      "snat": true,
      "type": "portmap"
    }
  ]

Plain Text

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Nov 19 23:19:19 GMT 2020

- 521 bytes

- Viewed (0)

github.com/istio/istio

RELEASE_BRANCHES.md

# Feature Freeze

One week before a release, the release branch goes into a state of code freeze. At this point only critical release
blocking bugs are addressed. Additional changes that are targeted for new features and capabilities will not be merged.

## Features requiring API changes

If a PR change requires an API change
* Updates to documentation do not require explicit approval from the Technical Oversight Committee (TOC). This can be

Plain Text

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Nov 12 23:27:43 GMT 2021

- 3.9K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-cni/templates/configmap-cni.yaml

{{- $defaultBinDir :=
    (.Capabilities.KubeVersion.GitVersion | contains "-gke") | ternary
      "/home/kubernetes/bin"
      "/opt/cni/bin"
}}
kind: ConfigMap
apiVersion: v1
metadata:
  name: istio-cni-config
  namespace: {{ .Release.Namespace }}
  labels:
    app: istio-cni
    release: {{ .Release.Name }}
    istio.io/rev: {{ .Values.revision | default "default" }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Jan 26 20:34:28 GMT 2024

- 1.3K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-operator/templates/deployment.yaml

          - --monitoring-host={{ .Values.operator.monitoring.host }}
          - --monitoring-port={{ .Values.operator.monitoring.port }}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            privileged: false
            readOnlyRootFilesystem: true
            runAsNonRoot: true
{{- if .Values.operator.seccompProfile }}
            seccompProfile:

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Aug 25 19:10:42 GMT 2023

- 2.6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/files/injection-template.yaml

  {{- end }}
    resources:
  {{ template "resources" . }}
    securityContext:
      allowPrivilegeEscalation: {{ .Values.global.proxy.privileged }}
      privileged: {{ .Values.global.proxy.privileged }}
      capabilities:
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
        add:
        - NET_ADMIN
        - NET_RAW
    {{- end }}
        drop:
        - ALL

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 26 16:51:17 GMT 2024

- 23.7K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/injection-template.yaml

  {{- end }}
    resources:
  {{ template "resources" . }}
    securityContext:
      allowPrivilegeEscalation: {{ .Values.global.proxy.privileged }}
      privileged: {{ .Values.global.proxy.privileged }}
      capabilities:
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
        add:
        - NET_ADMIN
        - NET_RAW
    {{- end }}
        drop:
        - ALL

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 26 16:51:17 GMT 2024

- 23.7K bytes

- Viewed (1)

Search Options