- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 19 for Lesh (0.19 sec)
-
architecture/ambient/ztunnel.md
As ztunnel aims to transparently encrypt and route users traffic, we need a mechanism to capture all traffic entering and leaving "mesh" pods. This is a security critical task: if the ztunnel can be bypassed, authorization policies can be bypassed. Redirection must meet these requirements: * All traffic *egressing* a pod in the mesh should be redirected to the node-local ztunnel on port 15001.
Plain Text - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Thu Apr 25 22:35:16 GMT 2024 - 16.6K bytes - Viewed (0) -
istioctl/cmd/root.go
rootCmd.AddCommand(dashboardCmd) manifestCmd := mesh.ManifestCmd(ctx) hideInheritedFlags(manifestCmd, cli.FlagNamespace, cli.FlagIstioNamespace, FlagCharts) rootCmd.AddCommand(manifestCmd) operatorCmd := mesh.OperatorCmd(ctx) hideInheritedFlags(operatorCmd, cli.FlagNamespace, cli.FlagIstioNamespace, FlagCharts) rootCmd.AddCommand(operatorCmd) installCmd := mesh.InstallCmd(ctx)
Go - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Thu Apr 11 20:51:30 GMT 2024 - 10K bytes - Viewed (0) -
cni/pkg/nodeagent/net.go
CNIMode: false, // we are in cni, but as we do the netns ourselves, we should keep this as false. NetworkNamespace: "", } } // Remove pod from mesh: pod is not deleted, we just want to remove it from the mesh. func (s *NetServer) RemovePodFromMesh(ctx context.Context, pod *corev1.Pod) error { log := log.WithLabels("ns", pod.Namespace, "name", pod.Name) log.Debugf("Pod is now opt out... cleaning up.")
Go - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 12.2K bytes - Viewed (1) -
manifests/addons/gen.sh
--from-file=istio-workload-dashboard.json="${TMP}/istio-workload-dashboard.json" \ --from-file=istio-service-dashboard.json="${TMP}/istio-service-dashboard.json" \ --from-file=istio-mesh-dashboard.json="${TMP}/istio-mesh-dashboard.json" \ --from-file=istio-extension-dashboard.json="${TMP}/istio-extension-dashboard.json" } > "${ADDONS}/grafana.yaml" # Set up loki { helm3 template loki loki \
Shell Script - Registered: Wed Apr 24 22:53:08 GMT 2024 - Last Modified: Tue Apr 09 21:40:53 GMT 2024 - 3.2K bytes - Viewed (0) -
istioctl/pkg/proxystatus/proxystatus.go
Use: "proxy-status [<type>/]<name>[.<namespace>]", Short: "Retrieves the synchronization status of each Envoy in the mesh", Long: ` Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in the mesh `, Example: ` # Retrieve sync status for all Envoys in a mesh istioctl proxy-status # Retrieve sync status for Envoys in a specific namespace istioctl proxy-status --namespace foo
Go - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Sat Apr 13 05:23:38 GMT 2024 - 6.2K bytes - Viewed (0) -
cni/pkg/nodeagent/server.go
if err != nil { log.Errorf("failed to remove pod from mesh: %v", err) return err } log.Debug("removing annotation from pod") err = util.AnnotateUnenrollPod(s.kubeClient, &pod.ObjectMeta) if err != nil { log.Errorf("failed to annotate pod unenrollment: %v", err) } return err } // Delete pod from mesh: pod is deleted. iptables rules will die with it, we just need to update ztunnel
Go - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 7.2K bytes - Viewed (0) -
manifests/charts/base/crds/crd-all.gen.yaml
location: description: |- Specify whether the service should be considered external to the mesh or part of the mesh. Valid Options: MESH_EXTERNAL, MESH_INTERNAL enum: - MESH_EXTERNAL - MESH_INTERNAL type: string ports:
Others - Registered: Wed Apr 24 22:53:08 GMT 2024 - Last Modified: Mon Apr 22 20:20:47 GMT 2024 - 606.1K bytes - Viewed (0) -
cni/README.md
- watches k8s resource for existing pods, so that pods that have already been started can be moved in or out of the ambient mesh. - sends UDS events to ztunnel via a socket whenever a pod is enabled for ambient mesh (whether from CNI plugin or node watcher), instructing ztunnel to create the "tube" socket.
Plain Text - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 12.3K bytes - Viewed (0) -
manifests/charts/gateways/istio-ingress/templates/deployment.yaml
{{- if $.Values.global.meshID }} - name: ISTIO_META_MESH_ID value: "{{ $.Values.global.meshID }}" {{- else if .Values.meshConfig.trustDomain }} - name: ISTIO_META_MESH_ID value: "{{ .Values.meshConfig.trustDomain }}" {{- end }} {{- if .Values.meshConfig.trustDomain }}
Others - Registered: Wed Apr 24 22:53:08 GMT 2024 - Last Modified: Thu Apr 18 18:16:49 GMT 2024 - 12.1K bytes - Viewed (1) -
manifests/charts/gateways/istio-egress/templates/deployment.yaml
{{- if $.Values.global.meshID }} - name: ISTIO_META_MESH_ID value: "{{ $.Values.global.meshID }}" {{- else if .Values.meshConfig.trustDomain }} - name: ISTIO_META_MESH_ID value: "{{ .Values.meshConfig.trustDomain }}" {{- end }} {{- if .Values.meshConfig.trustDomain }}
Others - Registered: Wed Apr 24 22:53:08 GMT 2024 - Last Modified: Thu Apr 18 18:16:49 GMT 2024 - 12.1K bytes - Viewed (0)