Search Options

Results per page
Sort
Preferred Languages
Advance

Results 1 - 10 of 11 for drop (0.2 sec)

  2. github.com/istio/istio

    cni/README.md 

    - CAP_SYS_ADMIN
- CAP_NET_ADMIN
- CAP_NET_RAW

## Ambient mode details
    Plain Text
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Fri May 03 19:29:42 GMT 2024
    - 12.3K bytes
    - Viewed (0)
  3. github.com/istio/istio

    manifests/charts/istio-control/istio-discovery/files/kube-gateway.yaml 

              capabilities:
            drop:
            - ALL
          allowPrivilegeEscalation: false
          privileged: false
          readOnlyRootFilesystem: true
          runAsUser: {{ .ProxyUID | default "1337" }}
          runAsGroup: {{ .ProxyGID | default "1337" }}
          runAsNonRoot: true
        {{- else }}
          capabilities:
            drop:
            - ALL
            add:
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Fri Apr 19 15:10:43 GMT 2024
    - 12.1K bytes
    - Viewed (0)
  4. github.com/istio/istio

    manifests/charts/istiod-remote/files/injection-template.yaml 

          capabilities:
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
        add:
        - NET_ADMIN
        - NET_RAW
    {{- end }}
        drop:
        - ALL
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
      readOnlyRootFilesystem: false
      runAsGroup: 0
      runAsNonRoot: false
      runAsUser: 0
    {{- else }}
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Fri Apr 26 16:51:17 GMT 2024
    - 23.7K bytes
    - Viewed (0)
  5. github.com/istio/istio

    manifests/charts/istio-control/istio-discovery/files/injection-template.yaml 

          capabilities:
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
        add:
        - NET_ADMIN
        - NET_RAW
    {{- end }}
        drop:
        - ALL
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
      readOnlyRootFilesystem: false
      runAsGroup: 0
      runAsNonRoot: false
      runAsUser: 0
    {{- else }}
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Fri Apr 26 16:51:17 GMT 2024
    - 23.7K bytes
    - Viewed (1)
  6. github.com/istio/istio

    manifests/charts/istio-control/istio-discovery/files/waypoint.yaml 

              successThreshold: 1
          timeoutSeconds: 1
        securityContext:
          privileged: false
          runAsGroup: 1337
          runAsUser: 0
          capabilities:
            drop:
            - ALL
        volumeMounts:
        - name: workload-socket
          mountPath: /var/run/secrets/workload-spiffe-uds
        - mountPath: /var/run/secrets/istio
          name: istiod-ca-cert
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Fri May 03 19:29:42 GMT 2024
    - 10.1K bytes
    - Viewed (0)
  7. github.com/istio/istio

    cni/pkg/plugin/sidecar_redirect.go 

    		// parse and set the bool value of invalidDrop
		redir.invalidDrop, valErr = strconv.ParseBool(v)
		if valErr != nil {
			log.Warnf("cannot parse invalid drop environment variable %v", valErr)
		}
	}
	return redir, nil
    Go
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Fri Jan 26 20:34:28 GMT 2024
    - 10.6K bytes
    - Viewed (0)
  8. github.com/istio/istio

    manifests/charts/gateways/istio-ingress/templates/deployment.yaml 

            {{- end }}
        {{- if not $gateway.runAsRoot }}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            privileged: false
            readOnlyRootFilesystem: true
        {{- end }}
          readinessProbe:
            failureThreshold: 30
            httpGet:
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Thu Apr 18 18:16:49 GMT 2024
    - 12.1K bytes
    - Viewed (1)
  9. github.com/istio/istio

    manifests/charts/gateways/istio-egress/templates/deployment.yaml 

            {{- end }}
        {{- if not $gateway.runAsRoot }}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            privileged: false
            readOnlyRootFilesystem: true
        {{- end }}
          readinessProbe:
            failureThreshold: 30
            httpGet:
    Others
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Thu Apr 18 18:16:49 GMT 2024
    - 12.1K bytes
    - Viewed (0)
  10. github.com/istio/istio

    cni/pkg/cmd/root.go 

    			return
		}

		// Creates a basic health endpoint server that reports health status
		// based on atomic flag, as set by installer
		// TODO nodeagent watch server should affect this too, and drop atomic flag
		installDaemonReady, watchServerReady := nodeagent.StartHealthServer()

		if cfg.InstallConfig.AmbientEnabled {
			// Start ambient controller
    Go
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Tue Apr 30 22:24:38 GMT 2024
    - 12.5K bytes
    - Viewed (0)
  11. github.com/istio/istio

    common-protos/k8s.io/api/admissionregistration/v1alpha1/generated.proto 

      // Examples:
  //   - Expression accessing a property named "namespace": {"Expression": "object.__namespace__ > 0"}
  //   - Expression accessing a property named "x-prop": {"Expression": "object.x__dash__prop > 0"}
  //   - Expression accessing a property named "redact__d": {"Expression": "object.redact__underscores__d > 0"}
  //
    Plain Text
    - Registered: Wed May 08 22:53:08 GMT 2024
    - Last Modified: Mon Mar 11 18:43:24 GMT 2024
    - 25.7K bytes
    - Viewed (0)
Back to top