TLSMode - Code Search

tests/integration/security/testdata/reachability/migration.yaml.tmpl

  - name: "vistio"
    labels:
      version: "vistio"
{{- if ne .TLSMode "" }}
    trafficPolicy:
      tls:
        mode: {{ .TLSMode }}
{{- end }}
  - name: "vlegacy"
    labels:
      version: "vlegacy"
{{- if ne .TLSMode "" }}
    trafficPolicy:
      tls:
        mode: {{ .TLSMode }}
  trafficPolicy:
    tls:
      mode: {{ .TLSMode }}

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Wed Jul 06 18:43:28 UTC 2022

- 975 bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/serviceregistry/serviceentry/conversion.go

	// * Use security.istio.io/tlsMode if its present
	// * If not, set TLS mode if ServiceAccount is specified
	tlsMode := model.DisabledTLSModeLabel
	if val, exists := wle.Labels[label.SecurityTlsMode.Name]; exists {
		tlsMode = val
	} else if wle.ServiceAccount != "" {
		tlsMode = model.IstioMutualTLSModeLabel
	}

	return tlsMode
}

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Wed May 29 02:03:58 UTC 2024

- 16.9K bytes

- Viewed (0)

github.com/istio/istio

istioctl/pkg/writer/envoy/configdump/testdata/endpoint/emptyfilter_output.json

                        "metadata": {
                            "filterMetadata": {
                                "envoy.transport_socket_match": {
                                    "tlsMode": "istio"
                                },
                                "istio": {
                                    "workload": "details-v1;default;details;v1;Kubernetes"
                                }

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Jul 12 02:25:59 UTC 2022

- 40.4K bytes

- Viewed (0)

github.com/istio/istio

istioctl/pkg/writer/envoy/configdump/testdata/endpoint/emptyfilter_output.yaml

            portValue: 9080
        healthCheckConfig: {}
      healthStatus: HEALTHY
      loadBalancingWeight: 1
      metadata:
        filterMetadata:
          envoy.transport_socket_match:
            tlsMode: istio
          istio:
            workload: details-v1;default;details;v1;Kubernetes
    loadBalancingWeight: 1
    locality: {}
  policy:
    overprovisioningFactor: 140

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Jul 12 02:25:59 UTC 2022

- 17.1K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/serviceregistry/kube/controller/endpoint_builder.go

	}

	return &model.IstioEndpoint{
		Labels:                b.labels,
		ServiceAccount:        b.serviceAccount,
		Locality:              b.locality,
		TLSMode:               b.tlsMode,
		Address:               endpointAddress,
		EndpointPort:          uint32(endpointPort),
		ServicePortName:       svcPortName,
		Network:               networkID,
		WorkloadName:          b.workloadName,

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu May 23 21:07:03 UTC 2024

- 4.8K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/xds/testdata/benchmarks/tcp.yaml

spec:
  hosts:
  - example.com
  ports:
  - number: 7070
    name: tcp
    protocol: TCP
  resolution: STATIC
  location: MESH_INTERNAL
  endpoints:
  - address: 1.1.1.1
    labels:
      security.istio.io/tlsMode: istio
---
# Set up .Services number of services.
{{- range $i := until .Services }}
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: service-{{$i}}
spec:
  addresses:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Sat Jul 29 02:10:48 UTC 2023

- 908 bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/xds/testdata/benchmarks/empty.yaml

    name: https
    protocol: HTTPS
  - number: 9090
    name: auto
    protocol: ""
  resolution: STATIC
  location: MESH_INTERNAL
  endpoints:
  - address: 1.1.1.1
    labels:
      security.istio.io/tlsMode: istio
---
# Set up .Services number of services. Each will have 4 ports (one for each protocol)
{{- range $i := until .Services }}
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Aug 08 03:45:12 UTC 2023

- 1.2K bytes

- Viewed (0)

github.com/istio/istio

istioctl/pkg/writer/envoy/configdump/testdata/endpoint/configdump.json

                                            "filter_metadata": {
                                                "envoy.transport_socket_match": {
                                                    "tlsMode": "istio"
                                                },
                                                "istio": {
                                                    "workload": "reviews-v3;default;reviews;v3;Kubernetes"

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Jul 12 02:25:59 UTC 2022

- 66K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/xds/endpoints/mtls_checker.go

// on the DR, original endpoint TLSMode (based on injection of sidecar), and PeerAuthentication settings.
func (c *mtlsChecker) checkMtlsEnabled(ep *model.IstioEndpoint, isWaypoint bool) bool {
	if drMode := c.destinationRule; drMode != nil {
		return *drMode == networkingapi.ClientTLSSettings_ISTIO_MUTUAL
	}

	// if endpoint has no sidecar or explicitly tls disabled by "security.istio.io/tlsMode" label.

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri Dec 01 07:32:22 UTC 2023

- 3.3K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/xds/testdata/benchmarks/auto.yaml

spec:
  hosts:
  - example.com
  ports:
  - number: 7070
    name: auto
    protocol: ""
  resolution: STATIC
  location: MESH_INTERNAL
  endpoints:
  - address: 1.1.1.1
    labels:
      security.istio.io/tlsMode: istio
---
# Set up .Services number of services.
{{- range $i := until .Services }}
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: service-{{$i}}
spec:
  addresses:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Sat Jul 29 02:10:48 UTC 2023

- 908 bytes

- Viewed (0)

Search Options