- Sort Score
- Result 10 results
- Languages All
Results 31 - 40 of 207 for some (0.14 sec)
-
cni/pkg/ipset/nldeps_linux.go
} func (m *realDeps) flush(name string) error { err := netlink.IpsetFlush(name) if err != nil { return fmt.Errorf("failed to flush ipset %s: %w", name, err) } return nil } // Alpine and some distros struggles with this - ipset CLI utilities support this, but // the kernel can be out of sync with the CLI utility, leading to errors like: //
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 3.9K bytes - Viewed (0) -
architecture/ambient/ztunnel.md
However, this has one glaring issue: how do we get the traffic to the remote proxies, while maintaining the zero-trust properties that Istio is built upon? A secondary goal was to enable a smoother on-ramp from "Zero" to "Getting some value". Historically, Istio had to really be consumed all-or-nothing for things to work as expected.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 25 22:35:16 GMT 2024 - 16.6K bytes - Viewed (0) -
cni/pkg/repair/repaircontroller.go
// We will get an event every time the pod changes. The repair is not instantaneous, though -- it will only recover // once the pod restarts (in CrashLoopBackoff), which can take some time. // We don't want to constantly try to apply the iptables rules, which is unneeded and will fail. // Instead, we track which UIDs we repaired and skip them if already repaired. //
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Sat Feb 10 00:31:55 GMT 2024 - 10.4K bytes - Viewed (0) -
manifests/charts/istio-control/istio-discovery/templates/mutatingwebhook.yaml
"caBundle" .Values.istiodRemote.injectionCABundle "namespace" .Release.Namespace }} {{- define "core" }} {{- /* Kubernetes unfortunately requires a unique name for the webhook in some newer versions, so we assign a unique prefix to each. */}} - name: {{.Prefix}}sidecar-injector.istio.io clientConfig: {{- if .injectionURL }} url: "{{ .injectionURL }}" {{- else }} service:
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 18 18:16:49 GMT 2024 - 5.1K bytes - Viewed (0) -
cni/pkg/nodeagent/server.go
} podNetns := NewPodNetnsProcFinder(os.DirFS(filepath.Join(pconstants.HostMountsPath, "proc"))) netServer := newNetServer(ztunnelServer, podNsMap, iptablesConfigurator, podNetns, set) // Set some defaults s := &Server{ ctx: ctx, kubeClient: client, isReady: ready, dataplane: &meshDataplane{ kubeClient: client.Kube(), netServer: netServer, }, } s.NotReady()
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 7.2K bytes - Viewed (0) -
Makefile.core.mk
# disable_pgv: disables protoc-gen-validation. This is not used buts adds many MB to Envoy protos # not set vtprotobuf: this adds some performance improvement, but at a binary cost increase that is not worth it for the agent AGENT_TAGS=agent,disable_pgv # disable_pgv: disables protoc-gen-validation. This is not used buts adds many MB to Envoy protos
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed May 08 20:25:15 GMT 2024 - 22.5K bytes - Viewed (0) -
common/scripts/check_clean_repo.sh
echo "You can also try applying the patch file from the build artifacts: git apply <(curl -sL \"${patchFile}\") " } if [[ -n $(git status --porcelain) ]]; then git status git diff echo "ERROR: Some files need to be updated, please run 'make gen' and include any changed files in your PR" write_patch_file exit 1
Shell Script - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Jan 11 22:57:12 GMT 2023 - 1.7K bytes - Viewed (0) -
istioctl/pkg/proxyconfig/clusters.go
"text/tabwriter" "github.com/spf13/cobra" "istio.io/istio/istioctl/pkg/cli" "istio.io/istio/istioctl/pkg/clioptions" "istio.io/istio/pkg/cluster" ) // TODO move to multicluster package; requires exposing some private funcs/vars in this package func ClustersCommand(ctx cli.Context) *cobra.Command { var opts clioptions.ControlPlaneOptions cmd := &cobra.Command{ Use: "remote-clusters",
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Jun 15 15:02:17 GMT 2023 - 2.3K bytes - Viewed (0) -
istioctl/pkg/authz/listener.go
"istio.io/istio/pkg/log" "istio.io/istio/pkg/wellknown" ) const ( anonymousName = "_anonymous_match_nothing_" ) // Matches the policy name in RBAC filter config with format like ns[default]-policy[some-policy]-rule[1]. var re = regexp.MustCompile(`ns\[(.+)\]-policy\[(.+)\]-rule\[(.+)\]`) type filterChain struct { rbacHTTP []*rbachttp.RBAC rbacTCP []*rbactcp.RBAC } type parsedListener struct {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Sep 11 15:29:30 GMT 2023 - 6K bytes - Viewed (0) -
common-protos/k8s.io/api/authorization/v1beta1/generated.proto
// +optional optional bool denied = 4; // Reason is optional. It indicates why a request was allowed or denied. // +optional optional string reason = 2; // EvaluationError is an indication that some error occurred during the authorization check. // It is entirely possible to get an error and be able to continue determine authorization status in spite of it.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 11.9K bytes - Viewed (0)