Search Options

Results per page
Sort
Preferred Languages
Advance

Results 41 - 50 of 264 for serviceAccount (0.18 sec)

  1. pilot/pkg/serviceregistry/kube/controller/ambient/workloads.go

    			Name:                  wle.Name,
    			Namespace:             wle.Namespace,
    			Network:               network,
    			ClusterId:             string(a.ClusterID),
    			ServiceAccount:        wle.Spec.ServiceAccount,
    			Services:              constructServicesFromWorkloadEntry(&wle.Spec, services),
    			AuthorizationPolicies: policies,
    			Status:                workloadapi.WorkloadStatus_HEALTHY, // TODO: WE can be unhealthy
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Thu Jun 13 16:51:29 UTC 2024
    - 20.9K bytes
    - Viewed (0)
  2. samples/extauthz/cmd/extauthz/main.go

    	overrideHeader    = "x-ext-authz-additional-header-override"
    	overrideGRPCValue = "grpc-additional-header-override-value"
    	resultAllowed     = "allowed"
    	resultDenied      = "denied"
    )
    
    var (
    	serviceAccount = flag.String("allow_service_account", "a",
    		"allowed service account, matched against the service account in the source principal from the client certificate")
    	httpPort = flag.String("http", "8000", "HTTP server port")
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Thu Feb 15 18:23:48 UTC 2024
    - 10.4K bytes
    - Viewed (0)
  3. pkg/controlplane/apiserver/config.go

    	for _, f := range opts.Authentication.ServiceAccounts.KeyFiles {
    		keys, err := keyutil.PublicKeysFromFile(f)
    		if err != nil {
    			return nil, nil, fmt.Errorf("failed to parse key file %q: %w", f, err)
    		}
    		pubKeys = append(pubKeys, keys...)
    	}
    	config.ServiceAccountIssuerURL = opts.Authentication.ServiceAccounts.Issuers[0]
    	config.ServiceAccountJWKSURI = opts.Authentication.ServiceAccounts.JWKSURI
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Fri Jun 07 17:57:37 UTC 2024
    - 14.9K bytes
    - Viewed (0)
  4. staging/src/k8s.io/api/flowcontrol/v1beta1/types.go

    	// `group` matches based on user group name.
    	// +optional
    	Group *GroupSubject `json:"group,omitempty" protobuf:"bytes,3,opt,name=group"`
    	// `serviceAccount` matches ServiceAccounts.
    	// +optional
    	ServiceAccount *ServiceAccountSubject `json:"serviceAccount,omitempty" protobuf:"bytes,4,opt,name=serviceAccount"`
    }
    
    // SubjectKind is the kind of subject.
    type SubjectKind string
    
    // Supported subject's kinds.
    const (
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Sun Sep 17 09:27:57 UTC 2023
    - 31.2K bytes
    - Viewed (0)
  5. pkg/apis/flowcontrol/types.go

    	Kind SubjectKind
    	// `user` matches based on username.
    	// +optional
    	User *UserSubject
    	// `group` matches based on user group name.
    	// +optional
    	Group *GroupSubject
    	// `serviceAccount` matches ServiceAccounts.
    	// +optional
    	ServiceAccount *ServiceAccountSubject
    }
    
    // SubjectKind is the kind of subject.
    type SubjectKind string
    
    // Supported subject's kinds.
    const (
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Mon Oct 30 22:22:51 UTC 2023
    - 24.3K bytes
    - Viewed (0)
  6. common-protos/k8s.io/api/flowcontrol/v1beta3/generated.proto

      // +optional
      optional UserSubject user = 2;
    
      // `group` matches based on user group name.
      // +optional
      optional GroupSubject group = 3;
    
      // `serviceAccount` matches ServiceAccounts.
      // +optional
      optional ServiceAccountSubject serviceAccount = 4;
    }
    
    // UserSubject holds detailed information for user-kind subject.
    message UserSubject {
      // `name` is the username that matches, or "*" to match all usernames.
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Mar 11 18:43:24 UTC 2024
    - 19.5K bytes
    - Viewed (0)
  7. staging/src/k8s.io/api/flowcontrol/v1beta2/types.go

    	// `group` matches based on user group name.
    	// +optional
    	Group *GroupSubject `json:"group,omitempty" protobuf:"bytes,3,opt,name=group"`
    	// `serviceAccount` matches ServiceAccounts.
    	// +optional
    	ServiceAccount *ServiceAccountSubject `json:"serviceAccount,omitempty" protobuf:"bytes,4,opt,name=serviceAccount"`
    }
    
    // SubjectKind is the kind of subject.
    type SubjectKind string
    
    // Supported subject's kinds.
    const (
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Sun Sep 17 09:27:57 UTC 2023
    - 31.2K bytes
    - Viewed (0)
  8. samples/security/spire/spire-quickstart.yaml

      # Unix Domain Socket is typically open to all (i.e. 0777).
      fsGroupPolicy: None
    
      # Declare support for ephemeral volumes only.
      volumeLifecycleModes:
        - Ephemeral
    
    ---
    apiVersion: v1
    kind: ServiceAccount
    metadata:
      name: spire-server
      namespace: spire
    
    ---
    # ConfigMap for spire-agent bootstrapping.
    apiVersion: v1
    kind: ConfigMap
    metadata:
      name: spire-bundle
      namespace: spire
    
    ---
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Thu Oct 12 16:12:42 UTC 2023
    - 32.2K bytes
    - Viewed (0)
  9. staging/src/k8s.io/api/flowcontrol/v1/types.go

    	// `group` matches based on user group name.
    	// +optional
    	Group *GroupSubject `json:"group,omitempty" protobuf:"bytes,3,opt,name=group"`
    	// `serviceAccount` matches ServiceAccounts.
    	// +optional
    	ServiceAccount *ServiceAccountSubject `json:"serviceAccount,omitempty" protobuf:"bytes,4,opt,name=serviceAccount"`
    }
    
    // SubjectKind is the kind of subject.
    type SubjectKind string
    
    // Supported subject's kinds.
    const (
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Thu May 23 17:42:49 UTC 2024
    - 31.1K bytes
    - Viewed (0)
  10. staging/src/k8s.io/api/flowcontrol/v1beta3/types.go

    	// `group` matches based on user group name.
    	// +optional
    	Group *GroupSubject `json:"group,omitempty" protobuf:"bytes,3,opt,name=group"`
    	// `serviceAccount` matches ServiceAccounts.
    	// +optional
    	ServiceAccount *ServiceAccountSubject `json:"serviceAccount,omitempty" protobuf:"bytes,4,opt,name=serviceAccount"`
    }
    
    // SubjectKind is the kind of subject.
    type SubjectKind string
    
    // Supported subject's kinds.
    const (
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Mon Oct 30 22:22:51 UTC 2023
    - 31.9K bytes
    - Viewed (0)
Back to top