- Sort Score
- Result 10 results
- Languages All
Results 1 - 3 of 3 for Lesh (0.14 sec)
-
cni/README.md
- watches k8s resource for existing pods, so that pods that have already been started can be moved in or out of the ambient mesh. - sends UDS events to ztunnel via a socket whenever a pod is enabled for ambient mesh (whether from CNI plugin or node watcher), instructing ztunnel to create the "tube" socket.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 12.3K bytes - Viewed (0) -
architecture/ambient/ztunnel.md
As ztunnel aims to transparently encrypt and route users traffic, we need a mechanism to capture all traffic entering and leaving "mesh" pods. This is a security critical task: if the ztunnel can be bypassed, authorization policies can be bypassed. Redirection must meet these requirements: * All traffic *egressing* a pod in the mesh should be redirected to the node-local ztunnel on port 15001.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 25 22:35:16 GMT 2024 - 16.6K bytes - Viewed (0) -
Makefile.core.mk
grep -Pv 'envoy/service/discovery/v3' |\ grep -Pv 'envoy/extensions/wasm/' |\ grep -Pv 'envoy/extensions/filters/(http|network)/wasm/' |\ grep -Pv 'istio\.io/api/(annotation|label|mcp|mesh|networking|security/v1alpha1|type)' |\ (! grep -P '^k8s.io|^sigs.k8s.io/gateway-api|cel|antlr|jwx/jwk|envoy/|istio.io/api') go-gen: @mkdir -p /tmp/bin @PATH="${PATH}":/tmp/bin go generate ./...
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed May 08 20:25:15 GMT 2024 - 22.5K bytes - Viewed (0)