- Sort Score
- Result 10 results
- Languages All
Results 81 - 90 of 779 for serviceAccounts (0.23 sec)
-
istioctl/pkg/multicluster/remote_secret.go
} func secretReferencesServiceAccount(serviceAccount *v1.ServiceAccount, secret *v1.Secret) error { if secret.Type != v1.SecretTypeServiceAccountToken || secret.Annotations[v1.ServiceAccountNameKey] != serviceAccount.Name { return fmt.Errorf("secret %s/%s does not reference ServiceAccount %s", secret.Namespace, secret.Name, serviceAccount.Name) } return nil }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Oct 11 01:43:17 UTC 2023 - 24K bytes - Viewed (0) -
pilot/pkg/serviceregistry/serviceentry/conversion_test.go
external bool, resolution model.Resolution, serviceAccounts ...string, ) *model.Service { svc := &model.Service{ CreationTime: GlobalTime, Hostname: hostname, DefaultAddress: address, MeshExternal: external, Resolution: resolution, ServiceAccounts: serviceAccounts, Attributes: model.ServiceAttributes{ ServiceRegistry: provider.External,
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu May 23 21:07:03 UTC 2024 - 39K bytes - Viewed (0) -
cmd/kubeadm/app/phases/addons/proxy/proxy_test.go
initConfiguration.ClusterConfiguration.ImageRepository = "someRepo" // Simulate an error if necessary switch tc.simError { case ServiceAccountError: client.PrependReactor("create", "serviceaccounts", func(action core.Action) (bool, runtime.Object, error) { return true, nil, apierrors.NewUnauthorized("") }) case InvalidControlPlaneEndpoint: initConfiguration.LocalAPIEndpoint.AdvertiseAddress = "1.2.3"
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sun Feb 18 11:14:32 UTC 2024 - 8.7K bytes - Viewed (0) -
tests/integration/pilot/multicluster_test.go
sa = "istio-reader-no-perms" pod = "istiod-bad-secrets-test" ) t.Logf("creating service account %s/%s", ns, sa) if _, err := remote.Kube().CoreV1().ServiceAccounts(ns).Create(context.TODO(), &corev1.ServiceAccount{ ObjectMeta: metav1.ObjectMeta{Name: sa}, }, metav1.CreateOptions{}); err != nil { t.Fatal(err) }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 08 22:02:59 UTC 2024 - 8.2K bytes - Viewed (0) -
pilot/pkg/networking/grpcgen/cds.go
// TODO support this case networking.ClientTLSSettings_MUTUAL: // TODO support this case networking.ClientTLSSettings_ISTIO_MUTUAL: tlsCtx := buildUpstreamTLSContext(b.push.ServiceAccounts(b.hostname, b.svc.Attributes.Namespace)) c.TransportSocket = &core.TransportSocket{ Name: transportSocketName, ConfigType: &core.TransportSocket_TypedConfig{TypedConfig: protoconv.MessageToAny(tlsCtx)}, }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Mar 28 17:09:02 UTC 2024 - 9.2K bytes - Viewed (0) -
pilot/pkg/xds/cds_test.go
}{ { name: "Kubernetes service and EDS ServiceEntry", objs: []runtime.Object{service, pod, endpoint}, configs: []config.Config{dr, seEDS}, // The ServiceEntry rule will "win" the pushContext.ServiceAccounts. // However, the Service will be processed first into a cluster. Since its not external, we do not add the SANs automatically sans: nil, }, { name: "Kubernetes service and NONE ServiceEntry",
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed May 01 02:06:39 UTC 2024 - 9.2K bytes - Viewed (0) -
pkg/config/schema/gvr/resources.gen.go
Service = schema.GroupVersionResource{Group: "", Version: "v1", Resource: "services"} ServiceAccount = schema.GroupVersionResource{Group: "", Version: "v1", Resource: "serviceaccounts"} ServiceEntry = schema.GroupVersionResource{Group: "networking.istio.io", Version: "v1alpha3", Resource: "serviceentries"}
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Apr 12 17:37:32 UTC 2024 - 12.1K bytes - Viewed (0) -
pkg/controller/serviceaccount/legacy_serviceaccount_token_cleaner.go
} // make sure the time to be 00:00 on the day just after the date starts to track return trackedSinceTime.AddDate(0, 0, 1), nil } func hasSecretReference(serviceAccount *v1.ServiceAccount, secretName string) bool { for _, secret := range serviceAccount.Secrets { if secret.Name == secretName { return true } } return false
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Oct 27 03:52:06 UTC 2023 - 10K bytes - Viewed (0) -
pkg/config/schema/metadata.yaml
builtin: true specless: true proto: "k8s.io.api.core.v1.ConfigMap" protoPackage: "k8s.io/api/core/v1" - kind: "ServiceAccount" plural: "serviceaccounts" version: "v1" builtin: true specless: true proto: "k8s.io.api.core.v1.ServiceAccount" protoPackage: "k8s.io/api/core/v1" - kind: "CertificateSigningRequest" plural: "certificatesigningrequests"
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Apr 12 17:37:32 UTC 2024 - 13.2K bytes - Viewed (0) -
pkg/controlplane/apiserver/options/options_test.go
}, BootstrapToken: &kubeoptions.BootstrapTokenAuthenticationOptions{}, OIDC: s.Authentication.OIDC, RequestHeader: &apiserveroptions.RequestHeaderAuthenticationOptions{}, ServiceAccounts: &kubeoptions.ServiceAccountAuthenticationOptions{ Lookup: true, ExtendExpiration: true, }, TokenFile: &kubeoptions.TokenFileAuthenticationOptions{},
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Jun 07 17:57:37 UTC 2024 - 10.7K bytes - Viewed (0)