RBAC - Code Search

manifests/charts/ztunnel/templates/rbac.yaml

John Howard <******@****.***> 1676484357 -0800

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Wed Feb 15 18:05:57 GMT 2023

- 345 bytes

- Viewed (0)

github.com/istio/istio

istioctl/pkg/authz/listener.go

					addPolicy(action, anonymousName, "0")
				}
			}
		}
	}

	buf := strings.Builder{}
	buf.WriteString("ACTION\tAuthorizationPolicy\tRULES\n")
	for _, action := range []rbacpb.RBAC_Action{rbacpb.RBAC_DENY, rbacpb.RBAC_ALLOW, rbacpb.RBAC_LOG} {
		if names, ok := actionToPolicy[action]; ok {
			sortedNames := make([]string, 0, len(names))
			for name := range names {
				sortedNames = append(sortedNames, name)
			}

Go

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Mon Sep 11 15:29:30 GMT 2023

- 6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/templates/clusterrolebinding.yaml

{{- if .Values.global.configCluster }}
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: istiod-clusterrole{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}-{{ .Release.Namespace }}
  labels:
    app: istiod
    release: {{ .Release.Name }}
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Sun Oct 10 17:32:44 GMT 2021

- 1.4K bytes

- Viewed (0)

github.com/istio/istio

common-protos/k8s.io/api/rbac/v1alpha1/generated.proto

syntax = "proto2";

package k8s.io.api.rbac.v1alpha1;

import "k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto";
import "k8s.io/apimachinery/pkg/runtime/generated.proto";
import "k8s.io/apimachinery/pkg/runtime/schema/generated.proto";

// Package-wide variables from generator "generated".
option go_package = "k8s.io/api/rbac/v1alpha1";

Plain Text

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Mon Mar 11 18:43:24 GMT 2024

- 8.5K bytes

- Viewed (0)

github.com/istio/istio

common-protos/k8s.io/api/rbac/v1beta1/generated.proto

syntax = "proto2";

package k8s.io.api.rbac.v1beta1;

import "k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto";
import "k8s.io/apimachinery/pkg/runtime/generated.proto";
import "k8s.io/apimachinery/pkg/runtime/schema/generated.proto";

// Package-wide variables from generator "generated".
option go_package = "k8s.io/api/rbac/v1beta1";

Plain Text

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Mon Mar 11 18:43:24 GMT 2024

- 8.6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateway/templates/role.yaml

{{/*Set up roles for Istio Gateway. Not required for gateway-api*/}}
{{- if .Values.rbac.enabled }}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: {{ include "gateway.serviceAccountName" . }}
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "gateway.labels" . | nindent 4}}
  annotations:
    {{- .Values.annotations | toYaml | nindent 4 }}
rules:
- apiGroups: [""]
  resources: ["secrets"]

Others

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Tue Feb 21 16:58:32 GMT 2023

- 963 bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-cni/templates/clusterrolebinding.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: istio-cni
  labels:
    app: istio-cni
    release: {{ .Release.Name }}
    istio.io/rev: {{ .Values.revision | default "default" }}
    install.operator.istio.io/owning-resource: {{ .Values.ownerName | default "unknown" }}
    operator.istio.io/component: "Cni"
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: istio-cni
subjects:

Others

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Wed Dec 20 22:14:13 GMT 2023

- 1.6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-egress/templates/rolebindings.yaml

{{ $gateway := index .Values "gateways" "istio-egressgateway" }}
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: {{ $gateway.name }}-sds
  namespace: {{ .Release.Namespace }}
  labels:
    release: {{ .Release.Name }}
    istio.io/rev: {{ .Values.revision | default "default" | quote }}
    install.operator.istio.io/owning-resource: {{ .Values.ownerName | default "unknown" }}
    operator.istio.io/component: "EgressGateways"

Others

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 630 bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-cni/templates/clusterrole.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: istio-cni
  labels:
    app: istio-cni
    release: {{ .Release.Name }}
    istio.io/rev: {{ .Values.revision | default "default" }}
    install.operator.istio.io/owning-resource: {{ .Values.ownerName | default "unknown" }}
    operator.istio.io/component: "Cni"
rules:
- apiGroups: [""]
  resources: ["pods","nodes","namespaces"]
  verbs: ["get", "list", "watch"]
---

Others

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Wed Dec 20 22:14:13 GMT 2023

- 2K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/templates/reader-clusterrolebinding.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: istio-reader-clusterrole{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}-{{ .Release.Namespace }}
  labels:
    app: istio-reader
    release: {{ .Release.Name }}
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: istio-reader-clusterrole{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}-{{ .Release.Namespace }}

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Mon Jul 12 16:44:21 GMT 2021

- 589 bytes

- Viewed (0)

Search Options