- Sort Score
- Result 10 results
- Languages All
Results 11 - 20 of 75 for mTLS (0.32 sec)
-
tests/integration/security/reachability_test.go
expectCrossCluster: notFromNaked, expectCrossNetwork: never, expectSuccess: always, }, // --------start of auto mtls partial test cases --------------- // The follow three consecutive test together ensures the auto mtls works as intended // for sidecar migration scenario. { name: "migration no tls", configs: config.Sources{
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu May 02 21:29:40 UTC 2024 - 20.6K bytes - Viewed (0) -
pilot/pkg/security/authn/policy_applier.go
} } } return outputPolicy } func isMtlsModeUnset(mtls *v1beta1.PeerAuthentication_MutualTLS) bool { return mtls == nil || mtls.Mode == v1beta1.PeerAuthentication_MutualTLS_UNSET
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Feb 23 09:47:21 UTC 2024 - 19.2K bytes - Viewed (0) -
tests/integration/security/sds_ingress/util/util.go
b.Eval(ns.Name(), c, gwTemplate) } b.ApplyOrFail(ctx) } // RunTestMultiMtlsGateways deploys multiple mTLS gateways with SDS enabled, and creates kubernetes secret that stores // private key, server certificate and CA certificate for each mTLS gateway. Verifies that all gateways are able to terminate // mTLS connections successfully.
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Jul 25 05:12:36 UTC 2023 - 20.2K bytes - Viewed (0) -
pilot/pkg/serviceregistry/serviceentry/conversion_test.go
makeInstance(httpStatic, "2.2.2.2", 18080, httpStatic.Spec.(*networking.ServiceEntry).Ports[1], nil, MTLS), makeInstance(httpStatic, "3.3.3.3", 1080, httpStatic.Spec.(*networking.ServiceEntry).Ports[0], nil, MTLS), makeInstance(httpStatic, "3.3.3.3", 8080, httpStatic.Spec.(*networking.ServiceEntry).Ports[1], nil, MTLS),
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu May 23 21:07:03 UTC 2024 - 39K bytes - Viewed (0) -
tests/integration/security/egress_gateway_origination_test.go
var ( credNameGeneric = "mtls-credential-generic" credNameNotGeneric = "mtls-credential-not-generic" fakeCredNameA = "fake-mtls-credential-a" credNameMissing = "mtls-credential-not-created" simpleCredName = "tls-credential-simple-cacert" credWithCRL = "mtls-credential-crl" credWithDummyCRL = "mtls-credential-dummy-crl" )
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 08 22:02:59 UTC 2024 - 15.4K bytes - Viewed (0) -
pilot/pkg/networking/core/listener_inbound.go
opts = getTLSFilterChainMatchOptions(lp) mtls.TCP = BuildListenerTLSContext(cc.tlsSettings, lb.node, lb.push.Mesh, istionetworking.TransportProtocolTCP, false) mtls.HTTP = mtls.TCP } else { lp := istionetworking.ModelProtocolToListenerProtocol(cc.port.Protocol) opts = getFilterChainMatchOptions(mtls, lp) } // Build the actual chain chains := lb.inboundChainForOpts(cc, mtls, opts) if cc.bindToPort {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 13 01:56:28 UTC 2024 - 35.1K bytes - Viewed (0) -
pilot/pkg/simulation/traffic.go
} mTLSSecretConfigName := "default" if input.MtlsSecretConfigName != "" { mTLSSecretConfigName = input.MtlsSecretConfigName } // mTLS listener will only accept mTLS traffic if fc.TransportSocket != nil && sim.requiresMTLS(fc, mTLSSecretConfigName) != (input.TLS == MTLS) { // If there is no tls inspector, then result.Error = ErrMTLSError return } if len(input.CustomListenerValidations) > 0 {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 13 01:56:28 UTC 2024 - 19.4K bytes - Viewed (0) -
docs/config/README.md
path_prefix (path) namespace prefix to isolate tenants e.g. "customer1/" coredns_path (path) shared bucket DNS records, default is "/skydns" client_cert (path) client cert for mTLS authentication client_cert_key (path) client cert key for mTLS authentication comment (sentence) optionally add a comment to this setting ``` or environment variables ``` KEY:
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Mon Sep 11 21:48:54 UTC 2023 - 17.7K bytes - Viewed (0) -
pilot/pkg/networking/grpcgen/lds.go
mode := checker.GetMutualTLSModeForPort(si.Port.TargetPort) // auto-mtls label is set - clients will attempt to connect using mtls, and // gRPC doesn't support permissive. if node.Labels[label.SecurityTlsMode.Name] == "istio" && mode == model.MTLSPermissive { mode = model.MTLSStrict }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Apr 17 22:20:44 UTC 2024 - 14.6K bytes - Viewed (0) -
tests/integration/telemetry/api/stats_test.go
// clt(https:443) -> sidecar(tls:443) -> istio-mtls -> (TLS:443)egress-gateway-> vs(tcp:443) -> cnn.com t.ConfigIstio().File(apps.Namespace.Name(), filepath.Join(base, "istio-mtls-dest-rule.yaml")).ApplyOrFail(t) t.ConfigIstio().File(apps.Namespace.Name(), filepath.Join(base, "istio-mtls-gateway.yaml")).ApplyOrFail(t) t.ConfigIstio().File(apps.Namespace.Name(), filepath.Join(base, "istio-mtls-vs.yaml")).ApplyOrFail(t)
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 08 22:02:59 UTC 2024 - 17.3K bytes - Viewed (0)