- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 15 for from (0.12 sec)
-
docker/Dockerfile.distroless
# prepare a distroless source context to copy files from FROM gcr.io/distroless/static-debian11@sha256:9be3fcc6abeaf985b5ecce59451acbcbb15e7be39472320c538d0d55a0834edc as distroless_source # prepare a base dev to modify file contents FROM ubuntu:noble as ubuntu_source # Modify contents of container COPY --from=distroless_source /etc/ /home/etc COPY --from=distroless_source /home/nonroot /home/nonroot RUN echo istio-proxy:x:1337: >> /home/etc/group
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed May 08 18:50:51 GMT 2024 - 836 bytes - Viewed (0) -
cni/deployments/kubernetes/Dockerfile.install-cni
# This version is from commit 86c4972a9f5f245cfb382c8e1e95f176d968c882. FROM ${ISTIO_BASE_REGISTRY}/iptables@sha256:863a23b9b2d6f3f282e651fb62a47d28a7bd19356839367654254f5677cea6fa as distroless # This will build the final image based on either debug or distroless from above # hadolint ignore=DL3006 FROM ${BASE_DISTRIBUTION:-debug} LABEL description="Istio CNI plugin installer."
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed May 08 00:24:50 GMT 2024 - 1.4K bytes - Viewed (0) -
istioctl/pkg/writer/ztunnel/configdump/configdump.go
} fmt.Fprintln(c.Stdout, string(out)) return nil } // PrintVersionSummary prints version information for Istio and Ztunnel from the config dump func (c *ConfigWriter) PrintVersionSummary() error { // TODO return nil } // PrintPodRootCAFromDynamicSecretDump prints just pod's root ca from dynamic secret config dump to the ConfigWriter stdout func (c *ConfigWriter) PrintPodRootCAFromDynamicSecretDump() (string, error) { // TODO
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 23 21:30:30 GMT 2024 - 2.8K bytes - Viewed (0) -
cni/pkg/iptables/iptables_linux.go
// // Adds in-pod rules for marking packets with the istio-specific TPROXY mark. // A very similar mechanism is used for sidecar TPROXY. // // TODO largely identical/copied from tools/istio-iptables/pkg/capture/run_linux.go inpodMarkRule := netlink.NewRule() inpodMarkRule.Family = family inpodMarkRule.Table = RouteTableInbound inpodMarkRule.Mark = InpodTProxyMark
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 3.3K bytes - Viewed (0) -
cni/pkg/nodeagent/server.go
if err != nil { log.Errorf("failed to remove pod from mesh: %v", err) return err } log.Debug("removing annotation from pod") err = util.AnnotateUnenrollPod(s.kubeClient, &pod.ObjectMeta) if err != nil { log.Errorf("failed to annotate pod unenrollment: %v", err) } return err } // Delete pod from mesh: pod is deleted. iptables rules will die with it, we just need to update ztunnel
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 7.2K bytes - Viewed (0) -
cni/pkg/ipset/nldeps_linux.go
err := netlink.IpsetDel(name, &netlink.IPSetEntry{ IP: net.IP(ip.AsSlice()), Protocol: &ipProto, }) if err != nil { return fmt.Errorf("failed to delete IP %s with and proto %d from ipset %s: %w", ip, ipProto, name, err) } return nil } func (m *realDeps) flush(name string) error { err := netlink.IpsetFlush(name) if err != nil {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 3.9K bytes - Viewed (0) -
cni/pkg/config/config.go
K8sServiceProtocol string // KUBERNETES_SERVICE_HOST K8sServiceHost string // KUBERNETES_SERVICE_PORT K8sServicePort string // KUBERNETES_NODE_NAME K8sNodeName string // Directory from where the CNI binaries should be copied CNIBinSourceDir string // Directories into which to copy the CNI binaries CNIBinTargetDirs []string // The HTTP port for monitoring MonitoringPort int
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 5.5K bytes - Viewed (0) -
cni/pkg/nodeagent/informers.go
if matchAmbient { log.Infof("Namespace %s is enabled in ambient mesh", namespace) } else { log.Infof("Namespace %s is disabled from ambient mesh", namespace) } for _, pod := range s.pods.List(namespace, klabels.Everything()) { // ztunnel pods are never "added to/removed from the mesh", so do not fire // spurious events for them to avoid triggering extra // ztunnel node reconciliation checks.
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 9.6K bytes - Viewed (0) -
docker/Dockerfile.base
FROM ubuntu:noble ENV DEBIAN_FRONTEND=noninteractive # Do not add more stuff to this list that isn't small or critically useful. # If you occasionally need something on the container do # sudo apt-get update && apt-get whichever # hadolint ignore=DL3005,DL3008 RUN apt-get update && \ apt-get install --no-install-recommends -y \ ca-certificates \ curl \ iptables \ iproute2 \ iputils-ping \ knot-dnsutils \
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed May 08 18:50:51 GMT 2024 - 1000 bytes - Viewed (0) -
istioctl/pkg/writer/ztunnel/configdump/certificates.go
if out, err = yaml.JSONToYAML(out); err != nil { return err } } fmt.Fprintln(c.Stdout, string(out)) return nil } // PrintSecretSummary prints a summary of dynamic active secrets from the config dump func (c *ConfigWriter) PrintSecretSummary() error { if c.ztunnelDump == nil { return fmt.Errorf("config writer has not been primed") } secretDump := c.ztunnelDump.Certificates
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 25 16:38:16 GMT 2024 - 3.2K bytes - Viewed (0)