- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 274 for well (0.13 sec)
-
architecture/ambient/ztunnel.md
Ztunnel will look up the destination from the [addresses](#address-type) it is configured with. For traffic to unknown addresses, or to workloads that are not a part of the mesh, the traffic will just be passed through as is. To make ztunnel more transparent, the original source IP address will be spoofed. Additionally, `splice` will be used to make this proxying more efficient when possible.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 25 22:35:16 GMT 2024 - 16.6K bytes - Viewed (0) -
manifests/charts/UPDATING-CHARTS.md
If the change is to a Kubernetes field (such as modifying a Deployment attribute), it will likely need to be install-time configuration. However, that doesn't necessarily mean a PR to add a value will be accepted. The `values.yaml` API is intended to maintain a *minimal core set of configuration* that most users will use.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Jul 27 18:28:55 GMT 2023 - 3.2K bytes - Viewed (0) -
architecture/ambient/peer-authentication.md
ztunnel receives traffic (authenticated or not) from a workload, it will forward that traffic to the Waypoint proxy **after** applying any `TRANSPORT` layer policies (i.e. `Authorization`s). Thus, if the destination workload has at least the equivalent of a `STRICT` `PeerAuthentication`, unauthenticated traffic will be rejected before it reaches the Waypoint proxy. If the effective policy is `PERMISSIVE` (the default), the ztunnel will open a vanilla TLS HBONE tunnel (NOTE: this is not mTLS) to the Waypoint...
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Aug 09 22:09:18 GMT 2023 - 3.9K bytes - Viewed (0) -
manifests/charts/base/values.yaml
# Validation webhook configuration url # For example: https://$remotePilotAddress:15017/validate validationURL: "" # Validation webhook caBundle value. Useful when running pilot with a well known cert validationCABundle: "" # For istioctl usage to disable istio config crds in base enableIstioConfigCRDs: true defaultRevision: "default" experimental:
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Apr 22 22:00:40 GMT 2024 - 1.3K bytes - Viewed (0) -
common-protos/k8s.io/api/node/v1alpha1/generated.proto
// that are required to describe the RuntimeClass to the Container Runtime // Interface (CRI) implementation, as well as any other components that need to // understand how the pod will be run. The RuntimeClassSpec is immutable. message RuntimeClassSpec { // runtimeHandler specifies the underlying runtime and configuration that the // CRI implementation will use to handle pods of this class. The possible
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 5K bytes - Viewed (0) -
common-protos/k8s.io/api/certificates/v1beta1/generated.proto
// and notAfter fields in the issued certificate to determine the actual duration. // // The v1.22+ in-tree implementations of the well-known Kubernetes signers will // honor this field as long as the requested duration is not greater than the // maximum duration they will honor per the --cluster-signing-duration CLI // flag to the Kubernetes controller manager. //
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 6.7K bytes - Viewed (0) -
istioctl/pkg/util/handlers/handlers.go
if idx := strings.LastIndex(name, "/"); idx > 0 { // If there is a / in it, we need to handle differently. This is resourcetype/name.namespace. // However, resourcetype can have . in it as well, so we should only look for namespace after the /. separator := strings.LastIndex(name[idx:], ".") if separator < 0 { return name, namespace } return name[0 : idx+separator], name[idx+separator+1:] }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Feb 06 15:01:41 GMT 2024 - 6.2K bytes - Viewed (0) -
common-protos/k8s.io/api/certificates/v1alpha1/generated.proto
// extension with the CA bit set. The API server will reject objects that // contain duplicate certificates, or that use PEM block headers. // // Users of ClusterTrustBundles, including Kubelet, are free to reorder and // deduplicate certificate blocks in this file according to their own logic, // as well as to drop PEM block headers and inter-block data. optional string trustBundle = 2;
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 4.2K bytes - Viewed (0) -
common-protos/k8s.io/api/discovery/v1beta1/generated.proto
// https://kubernetes.io/docs/concepts/overview/working-with-objects/labels // Topology may include a maximum of 16 key/value pairs. This includes, but // is not limited to the following well known keys: // * kubernetes.io/hostname: the value indicates the hostname of the node // where the endpoint is located. This should match the corresponding // node label.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 8K bytes - Viewed (0) -
cni/README.md
## Privileges required
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 12.3K bytes - Viewed (0)