- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 25 for dropCR (0.18 sec)
-
cni/README.md
- CAP_SYS_ADMIN - CAP_NET_ADMIN - CAP_NET_RAW ## Ambient mode details
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 12.3K bytes - Viewed (0) -
cni/pkg/plugin/testdata/invalid-drop.txt.golden
* mangle -A PREROUTING -m conntrack --ctstate INVALID -j DROP COMMIT * nat -N ISTIO_INBOUND -N ISTIO_REDIRECT -N ISTIO_IN_REDIRECT -N ISTIO_OUTPUT -A ISTIO_INBOUND -p tcp --dport 15008 -j RETURN -A ISTIO_REDIRECT -p tcp -j REDIRECT --to-ports 15001 -A ISTIO_IN_REDIRECT -p tcp -j REDIRECT --to-ports 15006 -A PREROUTING -p tcp -j ISTIO_INBOUND -A ISTIO_INBOUND -p tcp --dport 15020 -j RETURN -A ISTIO_INBOUND -p tcp --dport 15021 -j RETURN
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Feb 16 22:54:20 GMT 2023 - 1.2K bytes - Viewed (0) -
bin/diff_yaml.py
return res raise def normalize_res(res, args): if not res: return res if args.ignore_labels: drop_keys(res, "metadata", "labels") if args.ignore_namespace: drop_keys(res, "metadata", "namespace") res = normalize_ports(res) res = normalize_configmap(res) return res def normalize(rl, args):
Python - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Mar 03 16:14:57 GMT 2021 - 4.5K bytes - Viewed (0) -
manifests/charts/gateway/templates/deployment.yaml
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 18 18:16:49 GMT 2024 - 3.5K bytes - Viewed (0) -
manifests/charts/istio-control/istio-discovery/files/kube-gateway.yaml
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Apr 19 15:10:43 GMT 2024 - 12.1K bytes - Viewed (0) -
manifests/charts/istio-control/istio-discovery/files/waypoint.yaml
successThreshold: 1 timeoutSeconds: 1 securityContext: privileged: false runAsGroup: 1337 runAsUser: 0 capabilities: drop: - ALL volumeMounts: - name: workload-socket mountPath: /var/run/secrets/workload-spiffe-uds - mountPath: /var/run/secrets/istio name: istiod-ca-cert
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 10.1K bytes - Viewed (0) -
cni/pkg/plugin/sidecar_redirect.go
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 10.6K bytes - Viewed (0) -
manifests/charts/gateways/istio-ingress/templates/deployment.yaml
{{- end }} {{- if not $gateway.runAsRoot }} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true {{- end }} readinessProbe: failureThreshold: 30 httpGet:
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 18 18:16:49 GMT 2024 - 12.1K bytes - Viewed (1) -
cni/pkg/nodeagent/informers.go
// test flakes with the fake kube client in `pkg/kube/client.go` - // because we are using `List()` in the handler, without this requeue, // the fake client will sometimes drop pod events leading to test flakes. // // WaitForCacheSync *helps*, but does not entirely fix this problem s.namespaces = kclient.New[*corev1.Namespace](kubeClient)
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 9.6K bytes - Viewed (0) -
operator/cmd/mesh/testdata/manifest-generate/data-snapshot.tar.gz
}} {{- else if (semverCompare ">=1.22-0" .Capabilities.KubeVersion.GitVersion) }} # Safe since 1.22: https://github.com/kubernetes/kubernetes/pull/103326 capabilities: drop: - ALL allowPrivilegeEscala: false privileged: false readOnlyRootFilesyst: true runAsUser: 1337 runAsGroup: 1337 runAsNonRoot: true {{- else }} capabilities: drop: - ALL add: - NET_BIND_SERVICE runAsUser: 0 runAsGroup: 1337 runAsNonRoot: false allowPrivilegeEscala: true readOnlyRootFilesyst: true {{- end }} env: {{- with .Values.networkGateway...
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Jan 10 05:10:03 GMT 2024 - 198.1K bytes - Viewed (1)