mtls - Code Search

operator/cmd/mesh/testdata/manifest-generate/output/sidecar_template.golden.yaml

              name: istio-token
            {{- end }}
            {{- if .Values.global.mountMtlsCerts }}
            # Use the key and cert mounted to /etc/certs/ for the in-cluster mTLS communications.
            - mountPath: /etc/certs/
              name: istio-certs
              readOnly: true
            {{- end }}
            - name: istio-podinfo
              mountPath: /etc/istio/pod

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Wed Jan 10 05:10:03 UTC 2024

- 86.9K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inputs/hello.yaml.4.template.gen.yaml

          name: istio-envoy
        - mountPath: /var/run/secrets/tokens
          name: istio-token
        {{- if .Values.global.mountMtlsCerts }}
        # Use the key and cert mounted to /etc/certs/ for the in-cluster mTLS communications.
        - mountPath: /etc/certs/
          name: istio-certs
          readOnly: true
        {{- end }}
        - name: istio-podinfo
          mountPath: /etc/istio/pod

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Mon Jun 03 01:55:05 UTC 2024

- 75.9K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inputs/merge-probers.yaml.43.template.gen.yaml

          name: istio-envoy
        - mountPath: /var/run/secrets/tokens
          name: istio-token
        {{- if .Values.global.mountMtlsCerts }}
        # Use the key and cert mounted to /etc/certs/ for the in-cluster mTLS communications.
        - mountPath: /etc/certs/
          name: istio-certs
          readOnly: true
        {{- end }}
        - name: istio-podinfo
          mountPath: /etc/istio/pod

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Mon Jun 03 01:55:05 UTC 2024

- 75.9K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inputs/default.template.gen.yaml

          name: istio-envoy
        - mountPath: /var/run/secrets/tokens
          name: istio-token
        {{- if .Values.global.mountMtlsCerts }}
        # Use the key and cert mounted to /etc/certs/ for the in-cluster mTLS communications.
        - mountPath: /etc/certs/
          name: istio-certs
          readOnly: true
        {{- end }}
        - name: istio-podinfo
          mountPath: /etc/istio/pod

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Mon Jun 03 01:55:05 UTC 2024

- 75.9K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/networking/core/cluster_tls_test.go

			result: expectedResult{
				tlsContext: &tls.UpstreamTlsContext{
					CommonTlsContext: &tls.CommonTlsContext{
						TlsParams: &tls.TlsParameters{
							// if not specified, envoy use TLSv1_2 as default for client.
							TlsMaximumProtocolVersion: tls.TlsParameters_TLSv1_3,
							TlsMinimumProtocolVersion: tls.TlsParameters_TLSv1_2,
						},
						TlsCertificateSdsSecretConfigs: []*tls.SdsSecretConfig{
							{

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Mon May 06 03:53:05 UTC 2024

- 60.9K bytes

- Viewed (0)

github.com/istio/istio

security/tools/generate_cert/main.go

	keySize        = flag.Int("key-size", 2048, "Size of the generated private key")
	mode           = flag.String("mode", selfSignedMode, "Supported mode: self-signed, signer, citadel")
	// Enable this flag if istio mTLS is enabled and the service is running as server side
	isServer  = flag.Bool("server", false, "Whether this certificate is for a server.")

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri Apr 28 16:21:30 UTC 2023

- 5.7K bytes

- Viewed (0)

github.com/minio/minio

internal/kms/config.go

	EnvKESClientKey      = "MINIO_KMS_KES_KEY_FILE"     // Path to TLS private key for authenticating to KES with mTLS - usually prefer API keys
	EnvKESClientCert     = "MINIO_KMS_KES_CERT_FILE"    // Path to TLS certificate for authenticating to KES with mTLS - usually prefer API keys

Registered: Sun Jun 16 00:44:34 UTC 2024

- Last Modified: Wed Jun 12 14:31:26 UTC 2024

- 13.9K bytes

- Viewed (0)

github.com/istio/istio

pkg/istio-agent/grpcxds/grpc_bootstrap.go

	xdsMeta, err := extractMeta(opts.Node)
	if err != nil {
		return nil, fmt.Errorf("failed extracting xds metadata: %v", err)
	}

	// TODO direct to CP should use secure channel (most likely JWT + TLS, but possibly allow mTLS)
	serverURI := opts.DiscoveryAddress
	if opts.XdsUdsPath != "" {
		serverURI = fmt.Sprintf("unix:///%s", opts.XdsUdsPath)
	}

	bootstrap := Bootstrap{
		XDSServers: []XdsServer{{

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Sat Mar 30 00:31:03 UTC 2024

- 7.1K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/trustbundle/trustbundle.go

	endpoints          []string
	endpointUpdateChan chan struct{}
	remoteCaCertPool   *x509.CertPool
	meshConfig         mesh.Watcher
}

var (
	trustBundleLog = log.RegisterScope("trustBundle", "Workload mTLS trust bundle logs")
	remoteTimeout  = 10 * time.Second
)

// NewTrustBundle returns a new trustbundle
func NewTrustBundle(remoteCaCertPool *x509.CertPool, meshConfig mesh.Watcher) *TrustBundle {
	var err error

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu May 23 21:07:03 UTC 2024

- 7.8K bytes

- Viewed (0)

github.com/istio/istio

operator/cmd/mesh/testdata/manifest-generate/output/pilot_default.golden.yaml

              name: istio-token
            {{- end }}
            {{- if .Values.global.mountMtlsCerts }}
            # Use the key and cert mounted to /etc/certs/ for the in-cluster mTLS communications.
            - mountPath: /etc/certs/
              name: istio-certs
              readOnly: true
            {{- end }}
            - name: istio-podinfo
              mountPath: /etc/istio/pod

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Wed Jan 10 05:10:03 UTC 2024

- 102.6K bytes

- Viewed (0)

Search Options