- Sort Score
- Result 10 results
- Languages All
Results 51 - 60 of 73 for Chan (0.16 sec)
-
architecture/security/istio-agent.md
For discovery, the JWT token will be read directly from a file and sent as is. For CA, this logic is a bit more complex, as the support for external CAs is more mature than external discovery servers. This supports some additional configuration, a `CredentialFetcher` which allows fetching a token from places other than a file (for example, a local metadata server), and a `TokenExchanger` which allows exchanging a token for another form to match the CA server requirements.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Aug 22 16:45:50 GMT 2023 - 7.2K bytes - Viewed (1) -
common-protos/k8s.io/api/certificates/v1/generated.proto
// implementations prior to v1.22) // 2. Signer whose configured maximum is shorter than the requested duration // 3. Signer whose configured minimum is longer than the requested duration // // The minimum valid value for expirationSeconds is 600, i.e. 10 minutes. // // +optional optional int32 expirationSeconds = 8;
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 11.6K bytes - Viewed (0) -
common-protos/k8s.io/api/admission/v1/generated.proto
optional string name = 5; // Namespace is the namespace associated with the request (if any). // +optional optional string namespace = 6; // Operation is the operation being performed. This may be different than the operation // requested. e.g. a patch can result in either a CREATE or UPDATE Operation. optional string operation = 7; // UserInfo is information about the requesting user
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 8.1K bytes - Viewed (0) -
common-protos/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto
// re-acquire conflicting fields owned by other people. optional bool force = 2; // fieldManager is a name associated with the actor or entity // that is making these changes. The value must be less than or // 128 characters long, and only contain printable characters, // as defined by https://golang.org/pkg/unicode/#IsPrint. This // field is required. optional string fieldManager = 3; }
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 53.3K bytes - Viewed (0) -
architecture/networking/pilot.md
of a collection of controllers. Per Kubernetes, "controllers are control loops that watch the state of your cluster, then make or request changes where needed." In Istio, we use the term a bit more liberally. Istio controllers watch more than just the state of *a* cluster -- many are reading from multiple clusters, or even external sources (files and XDS). Generally, Kubernetes controllers are then writing state back to the cluster; Istio does have a few of these controllers, but most of...
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Feb 07 17:53:24 GMT 2024 - 19.1K bytes - Viewed (0) -
manifests/charts/istiod-remote/values.yaml
# Controls whether or not the untaint controller is active enabled: false # What namespace the untaint controller should watch for istio-cni pods. This is only required when istio-cni is running in a different namespace than istiod namespace: "" affinity: {} tolerations: [] cpu: targetAverageUtilization: 80 memory: {} # targetAverageUtilization: 80
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Apr 22 22:00:40 GMT 2024 - 20.2K bytes - Viewed (0) -
istioctl/pkg/describe/describe.go
fmt.Fprintf(writer, "%s%s\n", printSpaces(initPrintNum+printLevel2), mismatch) } } return } if facts == 0 { // We printed nothing other than the name. Print something. if len(vs.Spec.Http) > 0 { fmt.Fprintf(writer, "%s%d HTTP route(s)\n", printSpaces(initPrintNum+printLevel1), len(vs.Spec.Http)) } if len(vs.Spec.Tcp) > 0 {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Sat Apr 13 05:23:38 GMT 2024 - 50.4K bytes - Viewed (0) -
common-protos/k8s.io/api/extensions/v1beta1/generated.proto
// should be allowed by the policy. This field cannot be defined if the port field // is not defined or if the port field is defined as a named (string) port. // The endPort must be equal or greater than port. // +optional optional int32 endPort = 3; } // DEPRECATED 1.9 - This group version of NetworkPolicySpec is deprecated by networking/v1/NetworkPolicySpec. message NetworkPolicySpec {
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 45.6K bytes - Viewed (0) -
istioctl/pkg/precheck/precheck.go
resource.Namespace(ctx.Namespace()), resource.Namespace(ctx.IstioNamespace()), nil, ) if err != nil { return nil, err } sa.AddRunningKubeSource(cli) cancel := make(chan struct{}) result, err := sa.Analyze(cancel) if err != nil { return nil, err } if result.Messages != nil { msgs = append(msgs, result.Messages...) } return msgs, nil }
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Apr 12 02:57:30 GMT 2024 - 19.3K bytes - Viewed (0) -
manifests/charts/istio-cni/templates/clusterrole.yaml
{{- else if .Values.cni.repair.deletePods }} - apiGroups: [""] resources: ["pods"] verbs: ["delete"] {{- else if .Values.cni.repair.labelPods }} - apiGroups: [""] {{- /* pods/status is less privileged than the full pod, and either can label. So use the lower pods/status */}} resources: ["pods/status"] verbs: ["patch", "update"] {{- end }} {{- end }} --- {{- if .Values.cni.ambient.enabled }}
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Sat May 04 01:55:56 GMT 2024 - 2.2K bytes - Viewed (0)