- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 35 for topologies (0.81 sec)
-
tests/integration/security/policy_attachment_only/main_test.go
meshConfig: defaultConfig: gatewayTopology: numTrustedProxies: 1 # Needed for X-Forwarded-For (See https://istio.io/latest/docs/ops/configuration/traffic-management/network-topologies/) ` } else { cfg.ControlPlaneValues = ` values: pilot: env: PILOT_JWT_ENABLE_REMOTE_JWKS: true ISTIO_DUAL_STACK: true ENABLE_SELECTOR_BASED_K8S_GATEWAY_POLICY: false
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jan 10 01:47:52 UTC 2024 - 2.9K bytes - Viewed (0) -
tests/integration/security/main_test.go
PILOT_JWT_ENABLE_REMOTE_JWKS: true meshConfig: defaultConfig: gatewayTopology: numTrustedProxies: 1 # Needed for X-Forwarded-For (See https://istio.io/latest/docs/ops/configuration/traffic-management/network-topologies/) ` })). // Create namespaces first. This way, echo can correctly configure egress to all namespaces. SetupParallel( namespace.Setup(&echo1NS, namespace.Config{Prefix: "echo1", Inject: true}),
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 15 23:04:36 UTC 2024 - 2.7K bytes - Viewed (0) -
pkg/apis/storage/validation/validation.go
func validateAllowedTopologies(topologies []api.TopologySelectorTerm, fldPath *field.Path) field.ErrorList { allErrs := field.ErrorList{} if len(topologies) == 0 { return allErrs } rawTopologies := make([]map[string]sets.Set[string], len(topologies)) for i, term := range topologies { idxPath := fldPath.Index(i)
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Feb 28 00:47:13 UTC 2024 - 25.5K bytes - Viewed (0) -
pkg/test/framework/components/cluster/cluster.go
MetadataValue(key string) string // ProxyKubectlOnly returns a boolean value to indicate whether all traffic // should route through the HTTP proxy or only Kubectl traffic. (Useful // in topologies where the API server is private but the ingress is public). ProxyKubectlOnly() bool
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 06 22:12:34 UTC 2024 - 3K bytes - Viewed (0) -
pkg/scheduler/framework/plugins/podtopologyspread/scoring.go
TopologyPairToPodCounts map[topologyPair]*int64 // TopologyNormalizingWeight is the weight we give to the counts per topology. // This allows the pod counts of smaller topologies to not be watered down by // bigger ones. TopologyNormalizingWeight []float64 } // Clone implements the mandatory Clone interface. We don't really copy the data since // there is no need for that.
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Dec 15 03:30:06 UTC 2023 - 10.1K bytes - Viewed (0) -
architecture/security/istio-agent.md
## Authentication The agent supports two forms of authentication with the CA/discovery servers: mTLS and JWT. Varying deployment topologies mix and match these two. For a standard Kubernetes deployment, both CA and discovery will use JWT authentication, with a token automatically
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Aug 22 16:45:50 UTC 2023 - 7.2K bytes - Viewed (0) -
pkg/scheduler/framework/plugins/podtopologyspread/filtering.go
if !ok { return nil, fmt.Errorf("%+v convert to podtopologyspread.preFilterState error", c) } return s, nil } // calPreFilterState computes preFilterState describing how pods are spread on topologies. func (pl *PodTopologySpread) calPreFilterState(ctx context.Context, pod *v1.Pod) (*preFilterState, error) { constraints, err := pl.getConstraints(pod) if err != nil {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Feb 28 10:42:29 UTC 2024 - 12.4K bytes - Viewed (1) -
pkg/kubelet/cm/cpumanager/topology/topology_test.go
// representation. This one was created following the these concepts: // 1. be internally consistent (most important rule) // 2. be as close as possible as existing HW topologies // 3. if possible, minimize chances wrt existing HW topologies. name: "DualNumaMultiSocketPerNumaHT", machineInfo: cadvisorapi.MachineInfo{ NumCores: 80, NumSockets: 4, Topology: []cadvisorapi.Node{ {Id: 0,
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 03 16:26:09 UTC 2023 - 31.7K bytes - Viewed (0) -
pkg/scheduler/framework/plugins/interpodaffinity/filtering.go
// to not leave such pods in pending state forever, we check that if no other pod // in the cluster matches the namespace and selector of this pod, the pod matches // its own terms, and the node has all the requested topologies, then we allow the pod // to pass the affinity check. if len(state.affinityCounts) == 0 && podMatchesAllAffinityTerms(state.podInfo.RequiredAffinityTerms, state.podInfo.Pod) { return true } return false
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Thu Jun 01 10:24:54 UTC 2023 - 14.6K bytes - Viewed (0) -
pkg/scheduler/framework/plugins/volumebinding/volume_binding.go
{Event: framework.ClusterEvent{Resource: framework.PersistentVolume, ActionType: framework.Add | framework.Update}}, // Pods may fail to find available PVs because the node labels do not // match the storage class's allowed topologies or PV's node affinity. // A new or updated node may make pods schedulable. // // A note about UpdateNodeTaint event: // NodeAdd QueueingHint isn't always called because of the internal feature called preCheck.
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sat Mar 16 14:13:06 UTC 2024 - 16.4K bytes - Viewed (0)