prop - Code Search

manifests/charts/gateway/templates/deployment.yaml

          securityContext:
          {{- if .Values.containerSecurityContext }}
            {{- toYaml .Values.containerSecurityContext | nindent 12 }}
          {{- else }}
            capabilities:
              drop:
              - ALL
            allowPrivilegeEscalation: false
            privileged: false
            readOnlyRootFilesystem: true
            {{- if not (eq .Values.platform "openshift") }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 3.5K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/kube-gateway.yaml

          capabilities:
            drop:
            - ALL
          allowPrivilegeEscalation: false
          privileged: false
          readOnlyRootFilesystem: true
          runAsUser: {{ .ProxyUID | default "1337" }}
          runAsGroup: {{ .ProxyGID | default "1337" }}
          runAsNonRoot: true
        {{- else }}
          capabilities:
            drop:
            - ALL
            add:

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 19 15:10:43 GMT 2024

- 12.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-ingress/templates/deployment.yaml

              protocol: {{ $val.protocol | default "TCP" }}
            {{- end }}
            - containerPort: 15090
              protocol: TCP
              name: http-envoy-prom
          args:
          - proxy
          - router
          - --domain
          - $(POD_NAMESPACE).svc.{{ .Values.global.proxy.clusterDomain }}
        {{- if .Values.global.proxy.logLevel }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 12.1K bytes

- Viewed (1)

github.com/istio/istio

manifests/charts/istiod-remote/templates/configmap.yaml

  {{ $prom := include "default-prometheus" . | eq "true" }}
  {{ $sdMetrics := include "default-sd-metrics" . | eq "true" }}
  {{ $sdLogs := include "default-sd-logs" . | eq "true" }}
  {{- if or $prom $sdMetrics $sdLogs }}
    defaultProviders:
    {{- if or $prom $sdMetrics }}
      metrics:
      {{ if $prom }}- prometheus{{ end }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 4.9K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/gateway-injection-template.yaml

  {{- else }}
    image: "{{ .ProxyImage }}"
  {{- end }}
    ports:
    - containerPort: 15090
      protocol: TCP
      name: http-envoy-prom
    args:
    - proxy
    - router
    - --domain
    - $(POD_NAMESPACE).svc.{{ .Values.global.proxy.clusterDomain }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 8.6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/waypoint.yaml

      - name: istio-proxy
        ports:
        - containerPort: 15021
          name: status-port
          protocol: TCP
        - containerPort: 15090
          protocol: TCP
          name: http-envoy-prom
        {{- if contains "/" (annotation .ObjectMeta `sidecar.istio.io/proxyImage` .Values.global.proxy.image) }}
        image: "{{ annotation .ObjectMeta `sidecar.istio.io/proxyImage` .Values.global.proxy.image }}"

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri May 03 19:29:42 GMT 2024

- 10.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-ingress/templates/injected-deployment.yaml

            {{- end }}
            - containerPort: 15090
              protocol: TCP
              name: http-envoy-prom
        {{- if not $gateway.runAsRoot }}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            privileged: false
            readOnlyRootFilesystem: true
        {{- end }}
          resources:

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 5K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-egress/templates/injected-deployment.yaml

            {{- end }}
            - containerPort: 15090
              protocol: TCP
              name: http-envoy-prom
        {{- if not $gateway.runAsRoot }}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            privileged: false
            readOnlyRootFilesystem: true
        {{- end }}
          resources:

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 5K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/files/injection-template.yaml

      capabilities:
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
        add:
        - NET_ADMIN
        - NET_RAW
    {{- end }}
        drop:
        - ALL
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
      readOnlyRootFilesystem: false
      runAsGroup: 0
      runAsNonRoot: false
      runAsUser: 0
    {{- else }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 26 16:51:17 GMT 2024

- 23.7K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/injection-template.yaml

      capabilities:
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
        add:
        - NET_ADMIN
        - NET_RAW
    {{- end }}
        drop:
        - ALL
    {{- if not (or .Values.pilot.cni.enabled .Values.istio_cni.enabled) }}
      readOnlyRootFilesystem: false
      runAsGroup: 0
      runAsNonRoot: false
      runAsUser: 0
    {{- else }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 26 16:51:17 GMT 2024

- 23.7K bytes

- Viewed (1)

Search Options