s3cret - Code Search

istioctl/pkg/multicluster/remote_secret_test.go

	testServiceAccountName = "test-service-account"
)

func makeServiceAccount(secrets ...string) *v1.ServiceAccount {
	sa := &v1.ServiceAccount{
		ObjectMeta: metav1.ObjectMeta{
			Name:      testServiceAccountName,
			Namespace: testNamespace,
		},
	}

	for _, secret := range secrets {
		sa.Secrets = append(sa.Secrets, v1.ObjectReference{
			Name:      secret,
			Namespace: testNamespace,
		})
	}

	return sa
}

Go

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Tue Oct 31 14:48:28 GMT 2023

- 20.6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-ingress/templates/deployment.yaml

                fieldPath: spec.nodeName
          volumeMounts:
          - name: workload-socket
            mountPath: /var/run/secrets/workload-spiffe-uds
          - name: credential-socket
            mountPath: /var/run/secrets/credential-uds
          - name: workload-certs
            mountPath: /var/run/secrets/workload-spiffe-credentials
          - name: istio-envoy
            mountPath: /etc/istio/proxy

Others

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 12.1K bytes

- Viewed (1)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/gateway-injection-template.yaml

    volumeMounts:
    - name: workload-socket
      mountPath: /var/run/secrets/workload-spiffe-uds
    - name: credential-socket
      mountPath: /var/run/secrets/credential-uds
    {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
    - name: gke-workload-certificate
      mountPath: /var/run/secrets/workload-spiffe-credentials
      readOnly: true
    {{- else }}

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 8.6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/files/gateway-injection-template.yaml

    volumeMounts:
    - name: workload-socket
      mountPath: /var/run/secrets/workload-spiffe-uds
    - name: credential-socket
      mountPath: /var/run/secrets/credential-uds
    {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
    - name: gke-workload-certificate
      mountPath: /var/run/secrets/workload-spiffe-credentials
      readOnly: true
    {{- else }}

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 8.6K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-egress/templates/deployment.yaml

                fieldPath: spec.nodeName
          volumeMounts:
          - name: workload-socket
            mountPath: /var/run/secrets/workload-spiffe-uds
          - name: credential-socket
            mountPath: /var/run/secrets/credential-uds
          - name: workload-certs
            mountPath: /var/run/secrets/workload-spiffe-credentials
          - name: istio-envoy
            mountPath: /etc/istio/proxy

Others

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Thu Apr 18 18:16:49 GMT 2024

- 12.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/grpc-agent.yaml

    volumeMounts:
    - name: workload-socket
      mountPath: /var/run/secrets/workload-spiffe-uds
    {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
    - name: gke-workload-certificate
      mountPath: /var/run/secrets/workload-spiffe-credentials
      readOnly: true
    {{- else }}
    - name: workload-certs
      mountPath: /var/run/secrets/workload-spiffe-credentials
    {{- end }}

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 12.1K bytes

- Viewed (0)

github.com/istio/istio

istioctl/pkg/writer/envoy/configdump/configdump.go

		// check the ROOTCA from secret dump
		if secret.Name == "ROOTCA" {
			var returnStr string
			var returnErr error
			strCA, err := c.configDump.GetRootCAFromSecretConfigDump(secret.GetSecret())
			if err != nil {
				returnStr = ""
				returnErr = fmt.Errorf("can not dump ROOTCA from secret: %v", err)
			} else {
				returnStr = strCA
				returnErr = nil
			}
			return returnStr, returnErr
		}
	}

Go

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Thu Feb 29 20:46:41 GMT 2024

- 7.4K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istiod-remote/files/injection-template.yaml

  {{ template "resources" . }}
    volumeMounts:
    - name: workload-socket
      mountPath: /var/run/secrets/workload-spiffe-uds
    - name: credential-socket
      mountPath: /var/run/secrets/credential-uds
    {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
    - name: gke-workload-certificate
      mountPath: /var/run/secrets/workload-spiffe-credentials
      readOnly: true
    {{- else }}

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 23.7K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/injection-template.yaml

  {{ template "resources" . }}
    volumeMounts:
    - name: workload-socket
      mountPath: /var/run/secrets/workload-spiffe-uds
    - name: credential-socket
      mountPath: /var/run/secrets/credential-uds
    {{- if eq .Values.global.caName "GkeWorkloadCertificate" }}
    - name: gke-workload-certificate
      mountPath: /var/run/secrets/workload-spiffe-credentials
      readOnly: true
    {{- else }}

Others

- Registered: Wed Mar 20 22:53:08 GMT 2024

- Last Modified: Tue Feb 27 16:55:16 GMT 2024

- 23.7K bytes

- Viewed (1)

github.com/istio/istio

istioctl/pkg/writer/ztunnel/configdump/certificates.go

	for _, secret := range secretDump {
		if strings.Contains(secret.State, "Unavailable") {
			secret.State = "Unavailable"
		}
		if len(secret.CertChain) == 0 {
			fmt.Fprintf(w, "%v\t%v\t%v\t%v\t%v\t%v\t%v\n",
				secret.Identity, valueOrNA(""), secret.State, false, valueOrNA(""), valueOrNA(""), valueOrNA(""))
		} else {

Go

- Registered: Wed Apr 24 22:53:08 GMT 2024

- Last Modified: Tue Apr 23 21:30:30 GMT 2024

- 3.5K bytes

- Viewed (0)

Search Options