- Sort Score
- Result 10 results
- Languages All
Results 1 - 9 of 9 for tale (0.14 sec)
-
cni/pkg/iptables/iptables_linux.go
} netlinkRoutes := []*netlink.Route{ // In routing table ${INBOUND_TPROXY_ROUTE_TABLE}, create a single default rule to route all traffic to // the loopback interface. // Equiv: "ip route add local 0.0.0.0/0 dev lo table 100" { Dst: localhostDst, Scope: netlink.SCOPE_HOST, Type: unix.RTN_LOCAL, Table: RouteTableInbound, LinkIndex: loopbackLink.Attrs().Index, },
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 3.3K bytes - Viewed (0) -
cni/pkg/nodeagent/net.go
func (s *NetServer) RemovePodFromMesh(ctx context.Context, pod *corev1.Pod) error { log := log.WithLabels("ns", pod.Namespace, "name", pod.Name) log.Debugf("Pod is now opt out... cleaning up.") openNetns := s.currentPodSnapshot.Take(string(pod.UID)) if openNetns == nil { log.Warn("failed to find pod netns") return fmt.Errorf("failed to find pod netns") } // pod is removed from the mesh, but is still running. remove iptables rules
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 12.2K bytes - Viewed (1) -
operator/cmd/mesh/install.go
// InFilenames is an array of paths to the input IstioOperator CR files. InFilenames []string // ReadinessTimeout is maximum time to wait for all Istio resources to be ready. wait must be true for this setting // to take effect. ReadinessTimeout time.Duration // SkipConfirmation determines whether the user is prompted for confirmation. // If set to true, the user is not prompted and a Yes response is assumed in all cases. SkipConfirmation bool
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu May 02 14:30:43 GMT 2024 - 15.5K bytes - Viewed (1) -
architecture/ambient/ztunnel.md
This offered performance benefits that were too large to leave on the table, as well as opportunities to tune to our specific needs. ## Configuration protocol Ztunnel, of course, needs to be dynamically configured in order to make decisions on how it should handle traffic.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 25 22:35:16 GMT 2024 - 16.6K bytes - Viewed (0) -
cni/pkg/iptables/iptables.go
// within all pods as we do on the host. // // This should be fine, as the host binaries are all we have to work with here anyway, // as we are running within a privileged container - and we don't want to take the time to // redetect for each pod anyway. // // Extreme corner case: // If for some reason your host had both binaries, and you were injecting out-of-band
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue May 07 19:54:50 GMT 2024 - 19.7K bytes - Viewed (0) -
cni/pkg/nodeagent/net_test.go
assert.Equal(t, nlDeps.DelInpodMarkIPRuleCnt.Load(), 1) assert.Equal(t, nlDeps.DelLoopbackRoutesCnt.Load(), 1) // make sure the uid was taken from cache and netns closed netns := fixture.podNsMap.Take(string(pod.UID)) assert.Equal(t, nil, netns) // run gc to clean up ns: //revive:disable-next-line:call-to-gc Just a test that we are cleaning up the netns runtime.GC() assertNSClosed(t, closed) }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 16.4K bytes - Viewed (0) -
manifests/charts/istio-cni/values.yaml
repair: enabled: true hub: "" tag: "" # Repair controller has 3 modes. Pick which one meets your use cases. Note only one may be used. # This defines the action the controller will take when a pod is detected as broken. # labelPods will label all pods with <brokenPodLabelKey>=<brokenPodLabelValue>.
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 5.2K bytes - Viewed (1) -
manifests/charts/istio-cni/templates/daemonset.yaml
capabilities: drop: - ALL add: # CAP_NET_ADMIN is required to allow ipset and route table access - NET_ADMIN # CAP_NET_RAW is required to allow iptables mutation of the `nat` table - NET_RAW # CAP_SYS_ADMIN is required for both ambient and repair, in order to open
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 9.4K bytes - Viewed (0) -
common/scripts/setup_env.sh
fi } # This function is designed for maximum compatibility with various platforms. This runs on # any Mac or Linux platform with bash 4.2+. Please take care not to modify this function # without testing properly. # # This function will properly handle any type of path including those with spaces using the # loading pattern specified by *kubectl config*. #
Shell Script - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu May 02 16:31:40 GMT 2024 - 7.6K bytes - Viewed (0)