Search Options

Results per page
Sort
Preferred Languages
Advance

Results 1 - 10 of 150 for serviceAccountToken (0.44 sec)

  1. plugin/pkg/admission/serviceaccount/admission.go

    		}
    		for _, v := range pod.Spec.Volumes {
    			if proj := v.Projected; proj != nil {
    				for _, projSource := range proj.Sources {
    					if projSource.ServiceAccountToken != nil {
    						return admission.NewForbidden(a, fmt.Errorf("a mirror pod may not use ServiceAccountToken volume projections"))
    					}
    				}
    			}
    		}
    		return nil
    	}
    
    	// Require container pods to have service accounts
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Fri Apr 12 17:49:30 UTC 2024
    - 18.6K bytes
    - Viewed (0)
  2. cluster/gce/addons/konnectivity-agent/konnectivity-agent-ds.yaml

                timeoutSeconds: 15
          serviceAccountName: konnectivity-agent
          volumes:
    __EXTRA_VOLS__
            - name: konnectivity-agent-token
              projected:
                sources:
                  - serviceAccountToken:
                      path: konnectivity-agent-token
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Thu May 23 10:31:11 UTC 2024
    - 2.4K bytes
    - Viewed (0)
  3. manifests/charts/ztunnel/templates/daemonset.yaml

          terminationGracePeriodSeconds: {{ .Values.terminationGracePeriodSeconds }}
          volumes:
          - name: istio-token
            projected:
              sources:
              - serviceAccountToken:
                  path: istio-token
                  expirationSeconds: 43200
                  audience: istio-ca
          - name: istiod-ca-cert
            configMap:
              name: istio-ca-root-cert
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Tue Jun 11 01:33:52 UTC 2024
    - 5.6K bytes
    - Viewed (0)
  4. pkg/kube/inject/testdata/inject/proxy-override-runas.yaml.cni.injected

              - fieldRef:
                  fieldPath: metadata.annotations
                path: annotations
            name: istio-podinfo
          - name: istio-token
            projected:
              sources:
              - serviceAccountToken:
                  audience: istio-ca
                  expirationSeconds: 43200
                  path: istio-token
          - configMap:
              name: istio-ca-root-cert
            name: istiod-ca-cert
    status: {}
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Tue May 14 17:59:39 UTC 2024
    - 6.8K bytes
    - Viewed (0)
  5. pkg/kube/inject/testdata/inject/proxy-override-runas.yaml.injected

              - fieldRef:
                  fieldPath: metadata.annotations
                path: annotations
            name: istio-podinfo
          - name: istio-token
            projected:
              sources:
              - serviceAccountToken:
                  audience: istio-ca
                  expirationSeconds: 43200
                  path: istio-token
          - configMap:
              name: istio-ca-root-cert
            name: istiod-ca-cert
    status: {}
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Tue May 14 17:59:39 UTC 2024
    - 6.5K bytes
    - Viewed (0)
  6. pilot/pkg/config/kube/gateway/testdata/deployment/kube-gateway-ambient-redirect-infra.yaml

              - fieldRef:
                  fieldPath: metadata.annotations
                path: annotations
            name: istio-podinfo
          - name: istio-token
            projected:
              sources:
              - serviceAccountToken:
                  audience: <no value>
                  expirationSeconds: 43200
                  path: istio-token
    ---
    apiVersion: v1
    kind: Service
    metadata:
      annotations: {}
      labels:
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Fri May 03 19:29:42 UTC 2024
    - 6.6K bytes
    - Viewed (0)
  7. pilot/pkg/config/kube/gateway/testdata/deployment/proxy-config-crd.yaml

              - fieldRef:
                  fieldPath: metadata.annotations
                path: annotations
            name: istio-podinfo
          - name: istio-token
            projected:
              sources:
              - serviceAccountToken:
                  audience: <no value>
                  expirationSeconds: 43200
                  path: istio-token
    ---
    apiVersion: v1
    kind: Service
    metadata:
      annotations: {}
      labels:
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Fri May 03 19:29:42 UTC 2024
    - 6.6K bytes
    - Viewed (0)
  8. pkg/kube/inject/testdata/inject/proxy-override-runas.yaml.tproxy.injected

              - fieldRef:
                  fieldPath: metadata.annotations
                path: annotations
            name: istio-podinfo
          - name: istio-token
            projected:
              sources:
              - serviceAccountToken:
                  audience: istio-ca
                  expirationSeconds: 43200
                  path: istio-token
          - configMap:
              name: istio-ca-root-cert
            name: istiod-ca-cert
    status: {}
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Tue May 14 17:59:39 UTC 2024
    - 6.6K bytes
    - Viewed (0)
  9. pilot/pkg/config/kube/gateway/testdata/deployment/manual-ip.yaml

              - fieldRef:
                  fieldPath: metadata.annotations
                path: annotations
            name: istio-podinfo
          - name: istio-token
            projected:
              sources:
              - serviceAccountToken:
                  audience: <no value>
                  expirationSeconds: 43200
                  path: istio-token
    ---
    apiVersion: v1
    kind: Service
    metadata:
      annotations: {}
      labels:
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Fri May 03 19:29:42 UTC 2024
    - 6.6K bytes
    - Viewed (0)
  10. pilot/pkg/config/kube/gateway/testdata/deployment/manual-sa.yaml

              - fieldRef:
                  fieldPath: metadata.annotations
                path: annotations
            name: istio-podinfo
          - name: istio-token
            projected:
              sources:
              - serviceAccountToken:
                  audience: <no value>
                  expirationSeconds: 43200
                  path: istio-token
    ---
    apiVersion: v1
    kind: Service
    metadata:
      annotations: {}
      labels:
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Fri May 03 19:29:42 UTC 2024
    - 6.6K bytes
    - Viewed (0)
Back to top