- Sort Score
- Result 10 results
- Languages All
Results 61 - 70 of 96 for Staken (1.42 sec)
-
manifests/charts/istio-control/istio-discovery/files/injection-template.yaml
- path: "annotations" fieldRef: fieldPath: metadata.annotations - name: istio-token projected: sources: - serviceAccountToken: path: istio-token expirationSeconds: 43200 audience: {{ .Values.global.sds.token.aud }} {{- if eq .Values.global.pilotCertProvider "istiod" }} - name: istiod-ca-cert configMap:
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Apr 26 16:51:17 GMT 2024 - 23.7K bytes - Viewed (1) -
istioctl/pkg/writer/pilot/status.go
clusterStatus string listenerStatus string routeStatus string endpointStatus string extensionconfigStatus string } const ignoredStatus = "IGNORED" // PrintAll takes a slice of Istiod syncz responses and outputs them using a tabwriter func (s *XdsStatusWriter) PrintAll(statuses map[string]*discovery.DiscoveryResponse) error { w, fullStatus, err := s.setupStatusPrint(statuses) if err != nil {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Mar 15 04:16:55 GMT 2024 - 6.1K bytes - Viewed (0) -
cni/pkg/iptables/iptables.go
// within all pods as we do on the host. // // This should be fine, as the host binaries are all we have to work with here anyway, // as we are running within a privileged container - and we don't want to take the time to // redetect for each pod anyway. // // Extreme corner case: // If for some reason your host had both binaries, and you were injecting out-of-band
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue May 07 19:54:50 GMT 2024 - 19.7K bytes - Viewed (0) -
architecture/security/istio-agent.md
topologies mix and match these two. For a standard Kubernetes deployment, both CA and discovery will use JWT authentication, with a token automatically [generated and rotated by Kubernetes](https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection). For discovery, the JWT token will be read directly from a file and sent as is. For CA, this logic is a bit more complex,
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Aug 22 16:45:50 GMT 2023 - 7.2K bytes - Viewed (1) -
cni/pkg/install/testdata/kubeconfig-skip-tls
contexts: - context: cluster: local user: istio-cni name: istio-cni-context current-context: istio-cni-context kind: Config preferences: {} users: - name: istio-cni user:
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed May 17 02:22:22 GMT 2023 - 342 bytes - Viewed (0) -
manifests/charts/istiod-remote/values.yaml
pilotCertProvider: istiod sds: # The JWT token for SDS and the aud field of such JWT. See RFC 7519, section 4.1.3. # When a CSR is sent from Istio Agent to the CA (e.g. Istiod), this aud is to make sure the # JWT is intended for the CA. token: aud: istio-ca sts: # The service port used by Security Token Service (STS) server to handle token exchange requests.
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Apr 22 22:00:40 GMT 2024 - 20.2K bytes - Viewed (0) -
cni/pkg/nodeagent/pod_cache_test.go
Workload: podToWorkload(pod), Netns: ns, } netns1 := p.UpsertPodCacheWithNetns(string(pod.UID), wl) netnsTaken := p.Take(string(pod.UID)) if netns1 != netnsTaken { t.Fatalf("Expected the original Netns for the same uid, got %p and %p", netns1, ns) } if nil != p.Take(string(pod.UID)) { // expect nil because we already took it t.Fatalf("Expected nil Netns for the same uid twice") } }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Apr 12 21:47:31 GMT 2024 - 4.2K bytes - Viewed (0) -
manifests/charts/istio-cni/values.yaml
repair: enabled: true hub: "" tag: "" # Repair controller has 3 modes. Pick which one meets your use cases. Note only one may be used. # This defines the action the controller will take when a pod is detected as broken. # labelPods will label all pods with <brokenPodLabelKey>=<brokenPodLabelValue>.
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 5.2K bytes - Viewed (1) -
architecture/networking/pilot.md
#### Caching Config translation typically takes the overwhelming majority of Istiod's resource usage. In particular, protobuf encoding. As a result, caching has been introduced, storing the already encoded `protobuf.Any` for a given resource.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Feb 07 17:53:24 GMT 2024 - 19.1K bytes - Viewed (0) -
common-protos/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto
// respond with a 410 ResourceExpired error together with a continue token. If the client needs a // consistent list, it must restart their list without the continue field. Otherwise, the client may // send another list request with the token received with the 410 error, the server will respond with
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 53.3K bytes - Viewed (0)