- Sort Score
- Result 10 results
- Languages All
Results 11 - 20 of 46 for credentialName (0.29 sec)
-
pilot/pkg/security/model/authentication.go
// credentialName SDS which may refer to secrets which do not exist. We do not want to block the // entire listener/cluster in these cases. ResourceApiVersion: core.ApiVersion_V3, } // ConstructSdsSecretConfigForCredential constructs SDS secret configuration used // from certificates referenced by credentialName in DestinationRule or Gateway.
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Mar 28 22:11:02 UTC 2024 - 9.9K bytes - Viewed (0) -
tests/integration/security/egress_gateway_origination_test.go
} func newTLSGatewayDestinationRule(t framework.TestContext, to echo.Instances, destinationRuleMode string, credentialName string) { args := map[string]any{ "to": to, "Mode": destinationRuleMode, "CredentialName": credentialName, } // Get namespace for gateway pod. istioCfg := istio.DefaultConfigOrFail(t, t)
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 08 22:02:59 UTC 2024 - 15.4K bytes - Viewed (0) -
releasenotes/notes/istio-mutual-cred-name.yaml
kind: bug-fix area: traffic-management releaseNotes: - | **Fixed** an issue where using `ISTIO_MUTUAL` TLS mode in Gateways while also setting `credentialName` cause mutual TLS to not be configured. This configuration is now rejected, as `ISTIO_MUTUAL` is intended to be used without `credentialName` set.
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Sat Jan 22 06:41:00 UTC 2022 - 480 bytes - Viewed (0) -
releasenotes/notes/43921.yaml
apiVersion: release-notes/v2 kind: feature area: istioctl issue: - 43891 releaseNotes: - |
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 17 11:51:20 UTC 2023 - 240 bytes - Viewed (0) -
tests/integration/security/sds_ingress/util/util.go
} type TestConfig struct { Mode string CredentialName string Host string ServiceName string GatewayLabel string } const vsTemplate = ` apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: {{.CredentialName}} spec: hosts: - "{{.Host}}" gateways: - {{.CredentialName}} http: - match: - uri:
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Jul 25 05:12:36 UTC 2023 - 20.2K bytes - Viewed (0) -
tests/integration/security/egress_sidecar_tls_origination_test.go
func newTLSSidecarDestinationRule(t framework.TestContext, to echo.Instances, destinationRuleMode string, workloadSelector string, credentialName string, clientNamespace namespace.Instance, ) { args := map[string]any{ "to": to, "Mode": destinationRuleMode, "CredentialName": credentialName, "WorkloadSelector": workloadSelector, } se := ` apiVersion: networking.istio.io/v1alpha3 kind: ServiceEntry
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 08 22:02:59 UTC 2024 - 10.4K bytes - Viewed (0) -
pilot/pkg/config/kube/gateway/testdata/tls.yaml.golden
namespace: istio-system spec: servers: - hosts: - '*/domain.example' port: name: default number: 34000 protocol: HTTPS tls: credentialName: kubernetes-gateway://istio-system/my-cert-http mode: SIMPLE --- apiVersion: networking.istio.io/v1alpha3 kind: Gateway metadata: annotations: internal.istio.io/gateway-semantics: gateway
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Mar 01 20:54:36 UTC 2024 - 4K bytes - Viewed (0) -
pkg/config/analysis/analyzers/gateway/secret.go
continue } secret := ctx.Find(gvk.Secret, resource.NewShortOrFullName(gwNs, cn)) if secret == nil { m := msg.NewReferencedResourceNotFound(r, "credentialName", cn) if line, ok := util.ErrorLine(r, fmt.Sprintf(util.CredentialName, i)); ok { m.Line = line } ctx.Report(gvk.Gateway, m) continue } if !isValidSecret(secret) {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu May 04 18:29:24 UTC 2023 - 3.9K bytes - Viewed (0) -
pilot/pkg/config/kube/ingress/testdata/tls.yaml.golden
spec: selector: istio: ingressgateway servers: - hosts: - foo.org port: name: https-443-ingress-tls-bar-0 number: 443 protocol: HTTPS tls: credentialName: myingress-cert mode: SIMPLE - hosts: - '*' port: name: http-80-ingress-tls-bar number: 80 protocol: HTTP
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri May 19 18:20:34 UTC 2023 - 968 bytes - Viewed (0) -
pilot/pkg/networking/core/cluster_tls.go
if tls == nil { return nil, nil } // Hack to avoid egress sds cluster config generation for sidecar when // CredentialName is set in DestinationRule without a workloadSelector. // We do not want to support CredentialName setting in non workloadSelector based DestinationRules, because // that would result in the CredentialName being supplied to all the sidecars which the DestinationRule is scoped to,
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Apr 18 19:09:43 UTC 2024 - 19.2K bytes - Viewed (0)