- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 11 for inpod (0.05 sec)
-
cni/pkg/iptables/testdata/hostprobe_ipv6.golden
iptables -t nat -A ISTIO_POSTRT -m owner --socket-exists -p tcp -m set --match-set istio-inpod-probes-v4 dst -j SNAT --to-source 169.254.7.127 ip6tables -t nat -N ISTIO_POSTRT ip6tables -t nat -A POSTROUTING -j ISTIO_POSTRT
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Apr 30 22:24:38 UTC 2024 - 473 bytes - Viewed (0) -
cni/pkg/iptables/testdata/hostprobe.golden
iptables -t nat -N ISTIO_POSTRT iptables -t nat -A POSTROUTING -j ISTIO_POSTRT
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Apr 30 22:24:38 UTC 2024 - 222 bytes - Viewed (0) -
staging/src/k8s.io/apiserver/pkg/endpoints/handlers/rest_test.go
if err != nil { return nil, false, err } inPod := obj.(*example.Pod) if inPod.ResourceVersion == "" || inPod.ResourceVersion == "0" { inPod.ResourceVersion = p.updatePod.ResourceVersion } if inPod.ResourceVersion != p.updatePod.ResourceVersion { // If the patch didn't have an opinion on the resource version, retry like GuaranteedUpdate does if inPod.ResourceVersion == currentResourceVersion { continue }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue May 28 08:48:22 UTC 2024 - 41.8K bytes - Viewed (0) -
cni/pkg/nodeagent/net.go
}); err != nil { log.Errorf("failed to update POD inpod: %s/%s %v", pod.Namespace, pod.Name, err) return err } // For *any* failures after calling `CreateInpodRules`, we must return PartialAdd error. // The pod was injected with iptables rules, so it must be annotated as "inpod" - even if // the following fails. // This is so that if it is removed from the mesh, the inpod rules will unconditionally // be removed.
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 06 05:10:23 UTC 2024 - 13.4K bytes - Viewed (0) -
cni/pkg/iptables/iptables.go
iptableslog "istio.io/istio/tools/istio-iptables/pkg/log" ) var log = scopes.CNIAgent const ( // INPOD marks/masks InpodTProxyMark = 0x111 InpodTProxyMask = 0xfff InpodMark = 1337 // this needs to match the inpod config mark in ztunnel. InpodMask = 0xfff InpodRestoreMask = 0xffffffff ChainInpodOutput = "ISTIO_OUTPUT"
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri May 31 21:45:18 UTC 2024 - 19.9K bytes - Viewed (0) -
cni/pkg/iptables/iptables_linux.go
"golang.org/x/sys/unix" ) func AddInpodMarkIPRule(cfg *Config) error { err := forEachInpodMarkIPRule(cfg, netlink.RuleAdd) if errors.Is(err, unix.EEXIST) { log.Debugf("Ignoring exists error adding inpod mark ip rule: %v", err) return nil } return err } func DelInpodMarkIPRule(cfg *Config) error { return forEachInpodMarkIPRule(cfg, netlink.RuleDel) }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Apr 30 22:24:38 UTC 2024 - 3.3K bytes - Viewed (0) -
manifests/charts/ztunnel/values.yaml
# Valid values are: trace, debug, info, warn, error logLevel: info # Set to `type: RuntimeDefault` to use the default profile if available. seLinuxOptions: {} # TODO Ambient inpod - for OpenShift, set to the following to get writable sockets in hostmounts to work, eventually consider CSI driver instead #seLinuxOptions:
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 05 20:32:30 UTC 2024 - 3.5K bytes - Viewed (0) -
cni/pkg/cmd/root.go
// Start ambient controller // node agent will spawn a goroutine and watch the K8S API for events, // as well as listen for messages from the CNI binary. log.Info("Starting ambient node agent with inpod redirect mode") ambientAgent, err := nodeagent.NewServer(ctx, watchServerReady, cfg.InstallConfig.CNIEventAddress, nodeagent.AmbientArgs{ SystemNamespace: nodeagent.SystemNamespace,
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 12 16:26:35 UTC 2024 - 13K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/pkg/storage/testing/store_tests.go
outPod := &example.Pod{} inPod := &example.Pod{ObjectMeta: metav1.ObjectMeta{Namespace: "default", Name: "foo"}} err := store.Create(ctx, computePodKey(inPod), inPod, outPod, 0) if err != nil { t.Errorf("Unexpected error: %v", err) } lastObjecRV := outPod.ResourceVersion
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Jun 11 12:45:33 UTC 2024 - 91.4K bytes - Viewed (0) -
pkg/controller/tainteviction/taint_eviction.go
prevPod := prev.(*v1.Pod) newPod := obj.(*v1.Pod) tm.PodUpdated(prevPod, newPod) }, DeleteFunc: func(obj interface{}) { pod, isPod := obj.(*v1.Pod) // We can get DeletedFinalStateUnknown instead of *v1.Pod here and we need to handle that correctly. if !isPod { deletedState, ok := obj.(cache.DeletedFinalStateUnknown) if !ok { logger.Error(nil, "Received unexpected object", "object", obj)
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sat May 04 18:33:12 UTC 2024 - 19.9K bytes - Viewed (0)