- Sort Score
- Result 10 results
- Languages All
Results 81 - 90 of 826 for serviceAccount (0.38 sec)
-
manifests/charts/istiod-remote/templates/clusterrolebinding.yaml
roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: istiod-clusterrole{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}-{{ .Release.Namespace }} subjects: - kind: ServiceAccount name: istiod{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }} namespace: {{ .Values.global.istioNamespace }} ---
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Sun Oct 10 17:32:44 UTC 2021 - 1.4K bytes - Viewed (0) -
samples/bookinfo/platform/kube/bookinfo-dualstack.yaml
# # kubectl apply -f samples/bookinfo/platform/kube/bookinfo.yaml -l service=reviews # reviews Service # kubectl apply -f samples/bookinfo/platform/kube/bookinfo.yaml -l account=reviews # reviews ServiceAccount # kubectl apply -f samples/bookinfo/platform/kube/bookinfo.yaml -l app=reviews,version=v3 # reviews-v3 Deployment ##################################################################################################
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Jun 03 19:54:05 UTC 2024 - 7.9K bytes - Viewed (0) -
pkg/registry/core/rest/storage_core_generic.go
resourcequotastore "k8s.io/kubernetes/pkg/registry/core/resourcequota/storage" secretstore "k8s.io/kubernetes/pkg/registry/core/secret/storage" serviceaccountstore "k8s.io/kubernetes/pkg/registry/core/serviceaccount/storage" "k8s.io/kubernetes/pkg/serviceaccount" ) // GenericConfig provides information needed to build RESTStorage // for generic resources in core. It implements the "normal" RESTStorageProvider interface. type GenericConfig struct {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Mon Oct 30 21:15:10 UTC 2023 - 6K bytes - Viewed (0) -
manifests/charts/istio-control/istio-discovery/files/waypoint.yaml
apiVersion: v1 kind: ServiceAccount metadata: name: {{.ServiceAccount | quote}} namespace: {{.Namespace | quote}} annotations: {{- toJsonMap (omit .InfrastructureAnnotations "kubectl.kubernetes.io/last-applied-configuration" "gateway.istio.io/name-override" "gateway.istio.io/service-account" "gateway.istio.io/controller-version") | nindent 4 }} labels: {{- toJsonMap .InfrastructureLabels (strdict
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed May 29 22:41:03 UTC 2024 - 10.3K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/pkg/authentication/serviceaccount/util_test.go
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Mon Oct 30 21:15:10 UTC 2023 - 7.7K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/pkg/cel/library/authz.go
// // authorizer.serviceAccount('default', 'myserviceaccount') // returns an Authorizer for the service account with namespace 'default' and name 'myserviceaccount' // authorizer.serviceAccount('not@a#valid!namespace', 'validname') // returns an error // authorizer.serviceAccount('valid.example.com', 'invalid@*name') // returns an error // // resource // // Returns a ResourceCheck configured to check authorization for a particular API resource.
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Aug 23 21:31:27 UTC 2023 - 21.1K bytes - Viewed (0) -
plugin/pkg/admission/serviceaccount/admission_test.go
admit.SetExternalKubeInformerFactory(informerFactory) admit.MountServiceAccountToken = true // Add the default service account for the ns into the cache informerFactory.Core().V1().ServiceAccounts().Informer().GetStore().Add(&corev1.ServiceAccount{ ObjectMeta: metav1.ObjectMeta{ Name: DefaultServiceAccountName, Namespace: ns, }, }) v1PodIn := &corev1.Pod{ Spec: corev1.PodSpec{
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Apr 12 17:49:30 UTC 2024 - 36.9K bytes - Viewed (0) -
pkg/test/framework/components/istio/ca.go
} func CreateCertificate(t framework.TestContext, i Instance, serviceAccount, namespace string) (Cert, error) { c := t.Clusters().Default() rootCert, err := FetchRootCert(c.Kube()) if err != nil { return Cert{}, fmt.Errorf("failed to fetch root cert: %v", err) } token, err := GetServiceAccountToken(c.Kube(), "istio-ca", namespace, serviceAccount) if err != nil { return Cert{}, err }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Mar 27 16:59:05 UTC 2024 - 4.5K bytes - Viewed (0) -
security/pkg/server/ca/node_auth.go
return fmt.Errorf("pod found, but ServiceAccount does not match: %v vs %v", callerPod.Spec.ServiceAccountName, caller.PodServiceAccount) } // We want to find out if there is any pod running with the requested identity on the callers node. // The indexer (previously setup) creates a lookup table for a {Node, SA} pair, which we can lookup k := SaNode{
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Feb 28 16:41:38 UTC 2024 - 6.4K bytes - Viewed (0) -
istioctl/pkg/internaldebug/internal-debug.go
var namespace, serviceAccount string xdsRequest := discovery.DiscoveryRequest{ ResourceNames: []string{"list"}, Node: &core.Node{ Id: "debug~0.0.0.0~istioctl~cluster.local", }, TypeUrl: v3.DebugType, } xdsResponses, respErr := multixds.AllRequestAndProcessXds(&xdsRequest, centralOpts, istioNamespace, namespace, serviceAccount, kubeClient, multixds.DefaultOptions) if respErr != nil {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Mar 15 04:16:55 UTC 2024 - 6.9K bytes - Viewed (0)