13037 - Code Search

cni/pkg/plugin/sidecar_redirect.go

const (
	redirectModeREDIRECT         = "REDIRECT"
	redirectModeTPROXY           = "TPROXY"
	defaultProxyStatusPort       = "15020"
	defaultRedirectToPort        = "15001"
	defaultNoRedirectUID         = "1337"
	defaultNoRedirectGID         = "1337"
	defaultRedirectMode          = redirectModeREDIRECT
	defaultRedirectIPCidr        = "*"
	defaultRedirectExcludeIPCidr = ""
	defaultRedirectExcludePort   = defaultProxyStatusPort

Go

- Registered: Wed May 01 22:53:12 GMT 2024

- Last Modified: Fri Jan 26 20:34:28 GMT 2024

- 10.6K bytes

- Viewed (0)

github.com/istio/istio

docker/Dockerfile.distroless

FROM ubuntu:focal as ubuntu_source

# Modify contents of container
COPY --from=distroless_source /etc/ /home/etc
COPY --from=distroless_source /home/nonroot /home/nonroot
RUN echo istio-proxy:x:1337: >> /home/etc/group
RUN echo istio-proxy:x:1337:1337:istio-proxy:/nonexistent:/sbin/nologin >> /home/etc/passwd

# Customize distroless with the following:
# - password file
# - groups file
# - /home/nonroot directory
FROM distroless_source

Plain Text

- Registered: Wed May 01 22:53:12 GMT 2024

- Last Modified: Tue Jan 23 18:23:46 GMT 2024

- 836 bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateway/templates/deployment.yaml

            allowPrivilegeEscalation: false
            privileged: false
            readOnlyRootFilesystem: true
            {{- if not (eq .Values.platform "openshift") }}
            runAsUser: 1337
            runAsGroup: 1337
            {{- end }}
            runAsNonRoot: true
          {{- end }}
          env:
          {{- with .Values.networkGateway }}
          - name: ISTIO_META_REQUESTED_NETWORK_VIEW

Others

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 3.5K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/kube-gateway.yaml

          readOnlyRootFilesystem: true
          runAsUser: {{ .ProxyUID | default "1337" }}
          runAsGroup: {{ .ProxyGID | default "1337" }}
          runAsNonRoot: true
        {{- else }}
          capabilities:
            drop:
            - ALL
            add:
            - NET_BIND_SERVICE
          runAsUser: 0
          runAsGroup: 1337
          runAsNonRoot: false
          allowPrivilegeEscalation: true

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 12.1K bytes

- Viewed (0)

github.com/istio/istio

cni/pkg/iptables/testdata/hostprobe_ipv6.golden

ip6tables -t nat -N ISTIO_POSTRT
ip6tables -t nat -A POSTROUTING -j ISTIO_POSTRT

Plain Text

- Registered: Wed May 01 22:53:12 GMT 2024

- Last Modified: Tue Apr 30 22:24:38 GMT 2024

- 473 bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/gateway-injection-template.yaml

  {{- if .Values.global.proxy.lifecycle }}
    lifecycle:
      {{ toYaml .Values.global.proxy.lifecycle | indent 6 }}
  {{- end }}
    securityContext:
      runAsUser: {{ .ProxyUID | default "1337" }}
      runAsGroup: {{ .ProxyGID | default "1337" }}
    env:
    - name: PILOT_CERT_PROVIDER
      value: {{ .Values.global.pilotCertProvider }}
    - name: CA_ADDR
    {{- if .Values.global.caAddress }}

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 8.6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-egress/templates/injected-deployment.yaml

{{ toYaml $gateway.podAnnotations | indent 8 }}
{{ end }}
    spec:
{{- if not $gateway.runAsRoot }}
      securityContext:
{{- if not (eq .Values.global.platform "openshift") }}
        runAsUser: 1337
        runAsGroup: 1337
{{- end }}
        runAsNonRoot: true
{{- end }}
      serviceAccountName: {{ $gateway.name | default "istio-egressgateway" }}-service-account
{{- if .Values.global.priorityClassName }}

Others

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 5K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-ingress/templates/injected-deployment.yaml

{{ toYaml $gateway.podAnnotations | indent 8 }}
{{ end }}
    spec:
{{- if not $gateway.runAsRoot }}
      securityContext:
{{- if not (eq .Values.global.platform "openshift") }}
        runAsUser: 1337
        runAsGroup: 1337
{{- end }}
        runAsNonRoot: true
{{- end }}
      serviceAccountName: {{ $gateway.name | default "istio-ingressgateway" }}-service-account
{{- if .Values.global.priorityClassName }}

Others

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 5K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-ingress/templates/deployment.yaml

{{ toYaml $gateway.podAnnotations | indent 8 }}
{{ end }}
    spec:
{{- if not $gateway.runAsRoot }}
      securityContext:
{{- if not (eq .Values.global.platform "openshift") }}
        runAsUser: 1337
        runAsGroup: 1337
{{- end }}
        runAsNonRoot: true
{{- end }}
      serviceAccountName: {{ $gateway.name }}-service-account
{{- if .Values.global.priorityClassName }}

Others

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 12.1K bytes

- Viewed (1)

github.com/istio/istio

manifests/charts/istiod-remote/files/injection-template.yaml

      runAsGroup: 0
      runAsNonRoot: false
      runAsUser: 0
    {{- else }}
      readOnlyRootFilesystem: true
      runAsGroup: {{ .ProxyGID | default "1337" }}
      runAsUser: {{ .ProxyUID | default "1337" }}
      runAsNonRoot: true
    {{- end }}
  {{ end -}}
  {{- if eq (annotation .ObjectMeta `sidecar.istio.io/enableCoreDump` .Values.global.proxy.enableCoreDump) "true" }}

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 23.7K bytes

- Viewed (0)

Search Options