13037 - Code Search

manifests/charts/gateways/istio-egress/templates/injected-deployment.yaml

{{ toYaml $gateway.podAnnotations | indent 8 }}
{{ end }}
    spec:
{{- if not $gateway.runAsRoot }}
      securityContext:
{{- if not (eq .Values.global.platform "openshift") }}
        runAsUser: 1337
        runAsGroup: 1337
{{- end }}
        runAsNonRoot: true
{{- end }}
      serviceAccountName: {{ $gateway.name | default "istio-egressgateway" }}-service-account
{{- if .Values.global.priorityClassName }}

Others

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 5K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-ingress/templates/injected-deployment.yaml

{{ toYaml $gateway.podAnnotations | indent 8 }}
{{ end }}
    spec:
{{- if not $gateway.runAsRoot }}
      securityContext:
{{- if not (eq .Values.global.platform "openshift") }}
        runAsUser: 1337
        runAsGroup: 1337
{{- end }}
        runAsNonRoot: true
{{- end }}
      serviceAccountName: {{ $gateway.name | default "istio-ingressgateway" }}-service-account
{{- if .Values.global.priorityClassName }}

Others

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 5K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/files/injection-template.yaml

      runAsGroup: 0
      runAsNonRoot: false
      runAsUser: 0
    {{- else }}
      readOnlyRootFilesystem: true
      runAsGroup: {{ .ProxyGID | default "1337" }}
      runAsUser: {{ .ProxyUID | default "1337" }}
      runAsNonRoot: true
    {{- end }}
  {{ end -}}
  {{- if eq (annotation .ObjectMeta `sidecar.istio.io/enableCoreDump` .Values.global.proxy.enableCoreDump) "true" }}

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 23.7K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/injection-template.yaml

      runAsGroup: 0
      runAsNonRoot: false
      runAsUser: 0
    {{- else }}
      readOnlyRootFilesystem: true
      runAsGroup: {{ .ProxyGID | default "1337" }}
      runAsUser: {{ .ProxyUID | default "1337" }}
      runAsNonRoot: true
    {{- end }}
  {{ end -}}
  {{- if eq (annotation .ObjectMeta `sidecar.istio.io/enableCoreDump` .Values.global.proxy.enableCoreDump) "true" }}

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 23.7K bytes

- Viewed (1)

github.com/istio/istio

manifests/charts/istiod-remote/files/gateway-injection-template.yaml

  {{- if .Values.global.proxy.lifecycle }}
    lifecycle:
      {{ toYaml .Values.global.proxy.lifecycle | indent 6 }}
  {{- end }}
    securityContext:
      runAsUser: {{ .ProxyUID | default "1337" }}
      runAsGroup: {{ .ProxyGID | default "1337" }}
    env:
    - name: PILOT_CERT_PROVIDER
      value: {{ .Values.global.pilotCertProvider }}
    - name: CA_ADDR
    {{- if .Values.global.caAddress }}

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 8.6K bytes

- Viewed (0)

github.com/istio/istio

cni/pkg/iptables/iptables_test.go

		config func(cfg *Config)
	}{
		{
			"hostprobe",
			func(cfg *Config) {
			},
		},
	}
	probeSNATipv4 := netip.MustParseAddr("169.254.7.127")
	probeSNATipv6 := netip.MustParseAddr("fd16:9254:7127:1337:ffff:ffff:ffff:ffff")

	for _, tt := range cases {
		for _, ipv6 := range []bool{false, true} {
			t.Run(tt.name+"_"+ipstr(ipv6), func(t *testing.T) {
				cfg := constructTestConfig()
				cfg.EnableIPv6 = ipv6

Go

- Registered: Wed May 01 22:53:12 GMT 2024

- Last Modified: Tue Apr 30 22:24:38 GMT 2024

- 3.7K bytes

- Viewed (0)

github.com/istio/istio

cni/pkg/iptables/iptables.go

	iptableslog "istio.io/istio/tools/istio-iptables/pkg/log"
)

const (
	// INPOD marks/masks
	InpodTProxyMark      = 0x111
	InpodTProxyMask      = 0xfff
	InpodMark            = 1337 // this needs to match the inpod config mark in ztunnel.
	InpodMask            = 0xfff
	InpodRestoreMask     = 0xffffffff
	ChainInpodOutput     = "ISTIO_OUTPUT"
	ChainInpodPrerouting = "ISTIO_PRERT"

Go

- Registered: Wed May 01 22:53:12 GMT 2024

- Last Modified: Tue Apr 30 22:24:38 GMT 2024

- 19.6K bytes

- Viewed (0)

github.com/istio/istio

cni/pkg/plugin/testdata/status-ports.txt.golden

-A ISTIO_OUTPUT -o lo ! -d 127.0.0.1/32 -m owner --uid-owner 1337 -j ISTIO_IN_REDIRECT
-A ISTIO_OUTPUT -o lo -m owner ! --uid-owner 1337 -j RETURN
-A ISTIO_OUTPUT -m owner --uid-owner 1337 -j RETURN
-A ISTIO_OUTPUT -o lo ! -d 127.0.0.1/32 -m owner --gid-owner 1337 -j ISTIO_IN_REDIRECT
-A ISTIO_OUTPUT -o lo -m owner ! --gid-owner 1337 -j RETURN
-A ISTIO_OUTPUT -m owner --gid-owner 1337 -j RETURN
-A ISTIO_OUTPUT -d 127.0.0.1/32 -j RETURN

Plain Text

- Registered: Wed May 01 22:53:12 GMT 2024

- Last Modified: Tue Jul 13 23:37:21 GMT 2021

- 1.1K bytes

- Viewed (0)

github.com/istio/istio

cni/pkg/plugin/testdata/include-exclude-ip.txt.golden

-A ISTIO_OUTPUT -o lo ! -d 127.0.0.1/32 -p tcp ! --dport 15008 -m owner --uid-owner 1337 -j ISTIO_IN_REDIRECT
-A ISTIO_OUTPUT -m owner --uid-owner 1337 -j RETURN
-A ISTIO_OUTPUT -o lo ! -d 127.0.0.1/32 -p tcp ! --dport 15008 -m owner --gid-owner 1337 -j ISTIO_IN_REDIRECT
-A ISTIO_OUTPUT -m owner --gid-owner 1337 -j RETURN
-A ISTIO_OUTPUT -d 127.0.0.1/32 -j RETURN
-A ISTIO_OUTPUT -d 10.0.0.0/8 -j RETURN

Plain Text

- Registered: Wed May 01 22:53:12 GMT 2024

- Last Modified: Thu Feb 16 22:54:20 GMT 2023

- 1.1K bytes

- Viewed (0)

github.com/istio/istio

cni/pkg/nodeagent/options.go

	//
	// IPv6 link local ranges are designed to be collision-resistant by default, and so probably never need to be overridden
	DefaultHostProbeSNATIP   = "169.254.7.127"
	DefaultHostProbeSNATIPV6 = "fd16:9254:7127:1337:ffff:ffff:ffff:ffff"
)

type AmbientArgs struct {
	SystemNamespace string
	Revision        string
	KubeConfig      string
	ServerSocket    string
	DNSCapture      bool
	EnableIPv6      bool

Go

- Registered: Wed May 01 22:53:12 GMT 2024

- Last Modified: Tue Apr 30 22:24:38 GMT 2024

- 2K bytes

- Viewed (0)

Search Options