s3cret - Code Search

manifests/charts/gateways/istio-ingress/templates/deployment.yaml

                fieldPath: spec.nodeName
          volumeMounts:
          - name: workload-socket
            mountPath: /var/run/secrets/workload-spiffe-uds
          - name: credential-socket
            mountPath: /var/run/secrets/credential-uds
          - name: workload-certs
            mountPath: /var/run/secrets/workload-spiffe-credentials
          - name: istio-envoy
            mountPath: /etc/istio/proxy

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 12.1K bytes

- Viewed (1)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/gateway-injection-template.yaml

    volumeMounts:
    - name: workload-socket
      mountPath: /var/run/secrets/workload-spiffe-uds
    - name: credential-socket
      mountPath: /var/run/secrets/credential-uds
    {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
    - name: gke-workload-certificate
      mountPath: /var/run/secrets/workload-spiffe-credentials
      readOnly: true
    {{- else }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 8.6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/kube-gateway.yaml

          timeoutSeconds: 1
        volumeMounts:
        - name: workload-socket
          mountPath: /var/run/secrets/workload-spiffe-uds
        - name: credential-socket
          mountPath: /var/run/secrets/credential-uds
        {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
        - name: gke-workload-certificate
          mountPath: /var/run/secrets/workload-spiffe-credentials
          readOnly: true
        {{- else }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 19 15:10:43 GMT 2024

- 12.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/templates/clusterrole.yaml

  - apiGroups: ["gateway.networking.k8s.io"]
    resources: ["gatewayclasses"]
    verbs: ["create", "update", "patch", "delete"]

  # Needed for multicluster secret reading, possibly ingress certs in the future
  - apiGroups: [""]
    resources: ["secrets"]
    verbs: ["get", "watch", "list"]

  # Used for MCS serviceexport management
  - apiGroups: ["{{ $mcsAPIGroup }}"]
    resources: ["serviceexports"]

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Fri Apr 12 16:44:32 GMT 2024

- 5.7K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/base/crds/crd-all.gen.yaml

                                    type: string
                                  credentialName:
                                    description: The name of the secret that holds
                                      the TLS certs for the client including the CA
                                      certificates.
                                    type: string

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Mon Apr 22 20:20:47 GMT 2024

- 606.1K bytes

- Viewed (0)

github.com/istio/istio

istioctl/pkg/authz/testdata/configdump.yaml

              "AES128-GCM-SHA256"
             ]
            },
            "alpn_protocols": [
             "h2",
             "http/1.1"
            ],
            "tls_certificate_sds_secret_configs": [
             {
              "name": "default",
              "sds_config": {
               "api_config_source": {
                "api_type": "GRPC",
                "grpc_services": [

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Wed Jun 21 14:20:23 GMT 2023

- 206.7K bytes

- Viewed (2)

github.com/istio/istio

manifests/charts/istiod-remote/templates/reader-serviceaccount.yaml

# This service account aggregates reader permissions for the revisions in a given cluster
# Should be used for remote secret creation.
apiVersion: v1
kind: ServiceAccount
  {{- if .Values.global.imagePullSecrets }}
imagePullSecrets:
  {{- range .Values.global.imagePullSecrets }}
  - name: {{ . }}
    {{- end }}
    {{- end }}
metadata:
  name: istio-reader-service-account
  namespace: {{ .Values.global.istioNamespace }}
  labels:

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Mon Jul 12 16:44:21 GMT 2021

- 489 bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-ingress/templates/role.yaml

    install.operator.istio.io/owning-resource: {{ .Values.ownerName | default "unknown" }}
    operator.istio.io/component: "IngressGateways"
rules:
- apiGroups: [""]
  resources: ["secrets"]
  verbs: ["get", "watch", "list"]

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 540 bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateway/templates/role.yaml

  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "gateway.labels" . | nindent 4}}
  annotations:
    {{- .Values.annotations | toYaml | nindent 4 }}
rules:
- apiGroups: [""]
  resources: ["secrets"]
  verbs: ["get", "watch", "list"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: {{ include "gateway.serviceAccountName" . }}
  namespace: {{ .Release.Namespace }}
  labels:

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Tue Feb 21 16:58:32 GMT 2023

- 963 bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/files/gateway-injection-template.yaml

    volumeMounts:
    - name: workload-socket
      mountPath: /var/run/secrets/workload-spiffe-uds
    - name: credential-socket
      mountPath: /var/run/secrets/credential-uds
    {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
    - name: gke-workload-certificate
      mountPath: /var/run/secrets/workload-spiffe-credentials
      readOnly: true
    {{- else }}

Others

- Registered: Wed May 08 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 8.6K bytes

- Viewed (0)

Search Options