- Sort Score
- Result 10 results
- Languages All
Results 1 - 3 of 3 for ReferencePolicy (0.26 sec)
-
pilot/pkg/xds/sds.go
res = true } else { authzError = err } authzResult = &res return res } // There are 4 cases of secret reference // Verified cross namespace (by ReferencePolicy). No Authz needed. // Verified same namespace (implicit). No Authz needed. // Unverified cross namespace. Never allowed. // Unverified same namespace. Allowed if authorized.
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 15 23:04:36 UTC 2024 - 15.8K bytes - Viewed (0) -
pilot/pkg/config/kube/gateway/model.go
// key: referenced resources(e.g. secrets), value: gateway-api resources(e.g. gateways) ResourceReferences map[model.ConfigKey][]model.ConfigKey } // Reference stores a reference to a namespaced GVK, as used by ReferencePolicy type Reference struct { Kind config.GroupVersionKind Namespace k8s.Namespace
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Mar 28 17:09:09 UTC 2024 - 4K bytes - Viewed (0) -
pilot/pkg/config/kube/gateway/conversion.go
} result.AllowedReferences = ctx.AllowedReferences result.ReferencedNamespaceKeys = nsReferences result.ResourceReferences = ctx.resourceReferences return result } // convertReferencePolicies extracts all ReferencePolicy into an easily accessibly index. func convertReferencePolicies(r GatewayResources) AllowedReferences { res := map[Reference]map[Reference]*Grants{} type namespacedGrant struct { Namespace string
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Jun 14 04:34:37 UTC 2024 - 84.7K bytes - Viewed (0)