caBundle - Code Search

manifests/charts/istiod-remote/templates/validatingwebhookconfiguration.yaml

        namespace: {{ .Values.global.istioNamespace }}
        path: "/validate"
      {{- end }}
      {{- if .Values.base.validationCABundle }}
      caBundle: "{{ .Values.base.validationCABundle }}"
      {{- end }}
    rules:
      - operations:
          - CREATE
          - UPDATE
        apiGroups:
          - security.istio.io
          - networking.istio.io

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 2.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/templates/mutatingwebhook.yaml

    service:
      name: istiod{{- if not (eq .revision "") }}-{{ .revision }}{{- end }}
      namespace: {{ .namespace }}
      path: "{{ .injectionPath }}"
      port: 443
    {{- end }}
    {{- if .caBundle }}
    caBundle: "{{ .caBundle }}"
    {{- end }}
  sideEffects: None
  rules:
  - operations: [ "CREATE" ]
    apiGroups: [""]
    apiVersions: ["v1"]
    resources: ["pods"]
  failurePolicy: Fail

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 5.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/templates/default.yaml

        name: istiod-{{ .Values.defaultRevision }}
        {{- end }}
        namespace: {{ .Values.global.istioNamespace }}
        path: "/validate"
      {{- end }}
      {{- if .Values.base.validationCABundle }}
      caBundle: "{{ .Values.base.validationCABundle }}"
      {{- end }}
    rules:
      - operations:
          - CREATE
          - UPDATE
        apiGroups:
          - security.istio.io
          - networking.istio.io

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 1.6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/templates/mutatingwebhook.yaml

    service:
      name: istiod{{- if not (eq .revision "") }}-{{ .revision }}{{- end }}
      namespace: {{ .namespace }}
      path: "{{ .injectionPath }}"
      port: 443
    {{- end }}
    {{- if .caBundle }}
    caBundle: "{{ .caBundle }}"
    {{- end }}
  sideEffects: None
  rules:
  - operations: [ "CREATE" ]
    apiGroups: [""]
    apiVersions: ["v1"]
    resources: ["pods"]
  failurePolicy: Fail

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 5.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/base/templates/default.yaml

        name: istiod-{{ .Values.defaultRevision }}
        {{- end }}
        namespace: {{ .Values.global.istioNamespace }}
        path: "/validate"
      {{- end }}
      {{- if .Values.base.validationCABundle }}
      caBundle: "{{ .Values.base.validationCABundle }}"
      {{- end }}
    rules:
      - operations:
          - CREATE
          - UPDATE
        apiGroups:
          - security.istio.io
          - networking.istio.io

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 1.6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/templates/validatingwebhookconfiguration.yaml

        namespace: {{ .Values.global.istioNamespace }}
        path: "/validate"
      {{- end }}
      {{- if .Values.base.validationCABundle }}
      caBundle: "{{ .Values.base.validationCABundle }}"
      {{- end }}
    rules:
      - operations:
          - CREATE
          - UPDATE
        apiGroups:
          - security.istio.io
          - networking.istio.io

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 2.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/base/values.yaml

    enableCRDTemplates: false

    # Validation webhook configuration url
    # For example: https://$remotePilotAddress:15017/validate
    validationURL: ""
    # Validation webhook caBundle value. Useful when running pilot with a well known cert
    validationCABundle: ""

    # For istioctl usage to disable istio config crds in base
    enableIstioConfigCRDs: true

  defaultRevision: "default"

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Mon Apr 22 22:00:40 GMT 2024

- 1.3K bytes

- Viewed (0)

github.com/istio/istio

istioctl/pkg/kubeinject/kubeinject.go

	cc := e.clientConfig
	if cc == nil {
		return nil, nil
	}
	var address string
	if cc.URL != nil {
		address = *cc.URL
	}
	var certPool *x509.CertPool
	if len(cc.CABundle) > 0 {
		certPool = x509.NewCertPool()
		certPool.AppendCertsFromPEM(cc.CABundle)
	} else {
		var err error
		certPool, err = x509.SystemCertPool()
		if err != nil {
			return nil, err
		}
	}

Go

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Mar 29 02:29:02 GMT 2024

- 21.6K bytes

- Viewed (0)

github.com/istio/istio

common-protos/k8s.io/api/admissionregistration/v1beta1/generated.proto

  //
  // +optional
  optional ServiceReference service = 1;

  // `caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate.
  // If unspecified, system trust roots on the apiserver are used.
  // +optional
  optional bytes caBundle = 2;

Plain Text

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Mon Mar 11 18:43:24 GMT 2024

- 22.6K bytes

- Viewed (0)

github.com/istio/istio

common-protos/k8s.io/api/admissionregistration/v1/generated.proto

  //
  // +optional
  optional ServiceReference service = 1;

  // `caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate.
  // If unspecified, system trust roots on the apiserver are used.
  // +optional
  optional bytes caBundle = 2;

Plain Text

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Mon Mar 11 18:43:24 GMT 2024

- 24.4K bytes

- Viewed (0)

Search Options