- Sort Score
- Result 10 results
- Languages All
Results 11 - 20 of 21 for caps (0.28 sec)
-
cni/pkg/plugin/plugin_dryrun_test.go
"k8s.io/apimachinery/pkg/runtime" "istio.io/api/annotation" "istio.io/istio/pilot/cmd/pilot-agent/options" diff "istio.io/istio/pilot/test/util" "istio.io/istio/pkg/kube" "istio.io/istio/pkg/maps" "istio.io/istio/pkg/slices" "istio.io/istio/pkg/test/env" "istio.io/istio/tools/istio-iptables/pkg/cmd" "istio.io/istio/tools/istio-iptables/pkg/dependencies" ) type mockNetNs struct { path string }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Sat Feb 10 00:31:55 GMT 2024 - 8.4K bytes - Viewed (0) -
manifests/charts/istio-cni/values.yaml
# Note the pod will be crashlooping, so this may take a few minutes to become fully functional based on when the retry occurs. # This requires no RBAC privilege, but does require `securityContext.privileged/CAP_SYS_ADMIN`. repairPods: true initContainerName: "istio-validation" brokenPodLabelKey: "cni.istio.io/uninitialized" brokenPodLabelValue: "true"
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 5.2K bytes - Viewed (1) -
architecture/security/istio-agent.md
For discovery, the JWT token will be read directly from a file and sent as is. For CA, this logic is a bit more complex, as the support for external CAs is more mature than external discovery servers. This supports some additional configuration, a `CredentialFetcher` which allows fetching a token from places other than a file (for example, a local
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Aug 22 16:45:50 GMT 2023 - 7.2K bytes - Viewed (1) -
istioctl/pkg/describe/describe.go
configKube "istio.io/istio/pkg/config/kube" "istio.io/istio/pkg/config/mesh" "istio.io/istio/pkg/kube" "istio.io/istio/pkg/kube/inject" "istio.io/istio/pkg/kube/labels" "istio.io/istio/pkg/log" "istio.io/istio/pkg/maps" "istio.io/istio/pkg/slices" "istio.io/istio/pkg/url" "istio.io/istio/pkg/util/sets" "istio.io/istio/pkg/wellknown" ) type myProtoValue struct { *structpb.Value } const (
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Sat Apr 13 05:23:38 GMT 2024 - 50.4K bytes - Viewed (0) -
common-protos/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto
// 'i:<index>', where <index> is position of a item in a list // 'k:<keys>', where <keys> is a map of a list item's key fields to their unique values // If a key maps to an empty Fields value, the field that key represents is part of the set. // // The exact format is defined in sigs.k8s.io/structured-merge-diff // +protobuf.options.(gogoproto.goproto_stringer)=false message FieldsV1 {
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 53.3K bytes - Viewed (0) -
common/config/.golangci.yml
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Apr 22 19:22:39 GMT 2024 - 11K bytes - Viewed (0) -
istioctl/pkg/tag/generate.go
return "", err } return whBuf.String(), nil } func generateLabels(whLabels, curLabels, customLabels map[string]string, userManaged bool) map[string]string { whLabels = maps.MergeCopy(whLabels, curLabels) whLabels = maps.MergeCopy(whLabels, customLabels) if userManaged { for label := range whLabels { if strings.Contains(label, operatorNamespace) { delete(whLabels, label) } } }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Jan 16 17:43:49 GMT 2024 - 13.2K bytes - Viewed (0) -
manifests/charts/istio-cni/templates/daemonset.yaml
# privileged is redundant with CAP_SYS_ADMIN # since it's redundant, hardcode it to `true`, then manually drop ALL + readd granular # capabilities we actually require capabilities: drop: - ALL add: # CAP_NET_ADMIN is required to allow ipset and route table access - NET_ADMIN
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 9.4K bytes - Viewed (0) -
cni/pkg/nodeagent/podcgroupns.go
import ( "bufio" "bytes" "fmt" "io" "io/fs" "path" "regexp" "strings" "unicode" corev1 "k8s.io/api/core/v1" "k8s.io/apimachinery/pkg/types" "istio.io/istio/pkg/maps" "istio.io/istio/pkg/util/sets" ) type PodToNetns map[string]WorkloadInfo func (p PodToNetns) Close() { for _, wl := range p { wl.Netns.Close() } } type PodNetnsFinder interface {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Apr 12 21:47:31 GMT 2024 - 11K bytes - Viewed (0) -
architecture/environments/operator.md
# Istio operator code overview ## Introduction This document covers primarily the code, with some background on how the design maps to it. See the [design doc](https://docs.google.com/document/d/11j9ZtYWNWnxQYnZy8ayZav1FMwTH6F6z6fkDYZ7V298/edit#heading=h.qex63c29z2to) for a more complete design description. The operator code is divided roughly into five areas: 1. [IstioOperatorSpec API](#istiooperatorspec-api) and related infrastructure, which is expressed as a
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Aug 09 22:09:18 GMT 2023 - 13.4K bytes - Viewed (0)