- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 35 for Sant (0.24 sec)
-
cni/pkg/repair/repaircontroller.go
// We don't want to constantly try to apply the iptables rules, which is unneeded and will fail. // Instead, we track which UIDs we repaired and skip them if already repaired. // // An alternative would be to write something to the Pod (status, annotation, etc). // However, this requires elevated privileges we want to avoid if uid, f := c.repairedPods[key]; f { if uid == pod.UID {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Sat Feb 10 00:31:55 GMT 2024 - 10.4K bytes - Viewed (0) -
cni/README.md
1. Check k8s pod namespace against exclusion list (plugin config) - Config must exclude namespace that Istio control-plane is installed in (TODO: this may change, exclude at pod level is sufficient and we may want Istiod and other istio components to use ambient too) - If excluded, ignore the pod and return prevResult 1. Setup redirect rules for the pods: - Get the port list from pods definition, as well as annotations.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 12.3K bytes - Viewed (0) -
istioctl/pkg/describe/describe_test.go
}, } for _, tc := range cases { protocol := findProtocolForPort(&tc.port) if protocol != tc.expectedProtocol { t.Fatalf("Output didn't match for the port protocol: got %s want %s", protocol, tc.expectedProtocol) } } } func verifyExecAndK8sConfigTestCaseTestOutput(t *testing.T, c execAndK8sConfigTestCase) { t.Helper()
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Mar 28 09:54:01 GMT 2024 - 30.4K bytes - Viewed (0) -
istioctl/pkg/workload/workload_test.go
name string arg []string want map[string]string }{ {name: "empty", arg: []string{""}, want: map[string]string{"": ""}}, {name: "one-valid", arg: []string{"key=value"}, want: map[string]string{"key": "value"}}, {name: "one-valid-double-equals", arg: []string{"key==value"}, want: map[string]string{"key": "=value"}}, {name: "one-key-only", arg: []string{"key"}, want: map[string]string{"key": ""}}, }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Mar 27 16:59:05 GMT 2024 - 14.6K bytes - Viewed (0) -
cni/pkg/nodeagent/net.go
// so it should be annotated, so if it is removed from the mesh, the rules will be removed. // alternatively, we may not return an error at all, but we want this to fail on tests. return NewErrPartialAdd(err) } return nil } func (s *NetServer) sendPodToZtunnelAndWaitForAck(ctx context.Context, pod *corev1.Pod, netns Netns) error {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 12.2K bytes - Viewed (1) -
architecture/ambient/ztunnel.md
A secondary goal was to enable a smoother on-ramp from "Zero" to "Getting some value". Historically, Istio had to really be consumed all-or-nothing for things to work as expected. In particular, an easy answer to "I just want to have mTLS everywhere, then I can think about adopting the rest of service mesh" was desired. ## Goals Ztunnel should:
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 25 22:35:16 GMT 2024 - 16.6K bytes - Viewed (0) -
common-protos/k8s.io/api/admissionregistration/v1beta1/generated.proto
// "key": "runlevel", // "operator": "NotIn", // "values": [ // "0", // "1" // ] // } // ] // } // // If instead you want to only run the webhook on any objects whose // namespace is associated with the "environment" of "prod" or "staging"; // you will set the selector as follows: // "namespaceSelector": { // "matchExpressions": [
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 22.6K bytes - Viewed (0) -
Makefile.core.mk
# Create targets for TARGET_OUT_LINUX/binary # There are two use cases here: # * Building all docker images (generally in CI). In this case we want to build everything at once, so they share work # * Building a single docker image (generally during dev). In this case we just want to build the single binary alone BUILD_ALL ?= true define build-linux .PHONY: $(TARGET_OUT_LINUX)/$(shell basename $(1)) ifeq ($(BUILD_ALL),true)
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed May 08 20:25:15 GMT 2024 - 22.5K bytes - Viewed (0) -
common-protos/k8s.io/api/networking/v1/generated.proto
// (whether or not they contain an ingress section) are assumed to affect ingress. // If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ]. // Likewise, if you want to write a policy that specifies that no egress is allowed, // you must specify a policyTypes value that include "Egress" (since such a policy would not include
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 25.2K bytes - Viewed (0) -
common-protos/k8s.io/api/admissionregistration/v1/generated.proto
// "key": "runlevel", // "operator": "NotIn", // "values": [ // "0", // "1" // ] // } // ] // } // // If instead you want to only run the webhook on any objects whose // namespace is associated with the "environment" of "prod" or "staging"; // you will set the selector as follows: // "namespaceSelector": { // "matchExpressions": [
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 24.4K bytes - Viewed (0)