- Sort Score
- Result 10 results
- Languages All
Results 11 - 20 of 356 for Mode (0.14 sec)
-
architecture/ambient/peer-authentication.md
```yaml apiVersion: security.istio.io/v1beta1 kind: PeerAuthentication metadata: name: strict-and-permissive-mtls spec: selector: matchLabels: app: a mtls: mode: STRICT portLevelMtls: 9090: mode: PERMISSIVE ``` will be translated into this `Authorization`: ```yaml action: DENY groups: - rules: - matches: - notPrincipals: - presence: {} - rules:
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Aug 09 22:09:18 GMT 2023 - 3.9K bytes - Viewed (0) -
cni/pkg/plugin/sidecar_redirect.go
return nil } // validateInterceptionMode validates the interceptionMode annotation func validateInterceptionMode(mode string) error { switch mode { case redirectModeREDIRECT: case redirectModeTPROXY: default: return fmt.Errorf("interceptionMode invalid: %v", mode) } return nil } func validateCIDRList(cidrs string) error { if len(cidrs) > 0 {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 10.6K bytes - Viewed (0) -
manifests/charts/default/files/profile-ambient.yaml
# The ambient profile enables ambient mode. The Istiod, CNI, and ztunnel charts must be deployed meshConfig: defaultConfig: proxyMetadata: ISTIO_META_ENABLE_HBONE: "true" global: variant: distroless pilot: env: PILOT_ENABLE_AMBIENT: "true" CA_TRUSTED_NODE_ACCOUNTS: "istio-system/ztunnel,kube-system/ztunnel" cni: ambient: enabled: true
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 18 19:09:43 GMT 2024 - 683 bytes - Viewed (0) -
manifests/charts/istio-cni/files/profile-ambient.yaml
# The ambient profile enables ambient mode. The Istiod, CNI, and ztunnel charts must be deployed meshConfig: defaultConfig: proxyMetadata: ISTIO_META_ENABLE_HBONE: "true" global: variant: distroless pilot: env: PILOT_ENABLE_AMBIENT: "true" CA_TRUSTED_NODE_ACCOUNTS: "istio-system/ztunnel,kube-system/ztunnel" cni: ambient: enabled: true
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 18 19:09:43 GMT 2024 - 683 bytes - Viewed (0) -
manifests/charts/base/files/profile-ambient.yaml
# The ambient profile enables ambient mode. The Istiod, CNI, and ztunnel charts must be deployed meshConfig: defaultConfig: proxyMetadata: ISTIO_META_ENABLE_HBONE: "true" global: variant: distroless pilot: env: PILOT_ENABLE_AMBIENT: "true" CA_TRUSTED_NODE_ACCOUNTS: "istio-system/ztunnel,kube-system/ztunnel" cni: ambient: enabled: true
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 18 19:09:43 GMT 2024 - 683 bytes - Viewed (0) -
operator/cmd/mesh/testdata/manifest-generate/data-snapshot.tar.gz
https://istio.io/docs/reference/config/security/peer_authentication.html' properties: mtls: description: Mutual TLS settings for workload. properties: mode: description: Defines the mTLS mode used for peer authentication. enum: - UNSET - DISABLE - PERMISSIVE - STRICT type: string type: object portLevelMtls: additionalProperties: properties: mode: description: Defines the mTLS mode used for peer authentication. enum: - UNSET - DISABLE - PERMISSIVE - STRICT type: string type: object description: Port specific mutual...
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Jan 10 05:10:03 GMT 2024 - 198.1K bytes - Viewed (1) -
common-protos/k8s.io/api/storage/v1beta1/generated.proto
// refer to a given node as "node1", but the storage system may refer to // the same node as "nodeA". When Kubernetes issues a command to the storage // system to attach a volume to a specific node, it can use this field to // refer to the node name using the ID that the storage system will // understand, e.g. "nodeA" instead of "node1". This field is required. optional string nodeID = 2;
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 24.9K bytes - Viewed (0) -
cni/pkg/nodeagent/net.go
log.Infof("in pod mode - adding pod %s/%s to ztunnel ", pod.Namespace, pod.Name) // make sure the cache is aware of the pod, even if we don't have the netns yet. s.currentPodSnapshot.Ensure(string(pod.UID)) openNetns, err := s.getOrOpenNetns(pod, netNs) if err != nil { return err } // Handle node healthcheck probe rewrites
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 12.2K bytes - Viewed (1) -
common-protos/k8s.io/api/resource/v1alpha2/generated.proto
// should be maintained throughout the lifetime of a claim. Each // ResourceHandle contains data that should be passed to a specific kubelet // plugin once it lands on a node. This data is returned by the driver // after a successful allocation and is opaque to Kubernetes. Driver // documentation may explain to users how to interpret this data if needed. //
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 14.4K bytes - Viewed (0) -
manifests/charts/istio-control/istio-discovery/files/waypoint.yaml
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 10.1K bytes - Viewed (0)