ServiceAccountName - Code Search

istioctl/pkg/multicluster/remote_secret_test.go

				return &fakeOutputWriter{injectError: c.outputWriterError}
			}
			if c.secType != SecretTypeConfig {
				c.secType = SecretTypeRemote
			}
			opts := RemoteSecretOptions{
				ServiceAccountName: testServiceAccountName,
				AuthType:           RemoteSecretAuthTypeBearerToken,
				// ClusterName: testCluster,
				KubeOptions: KubeOptions{
					Namespace: testNamespace,
				},
				Type:       c.secType,

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Oct 31 14:48:28 UTC 2023

- 20.6K bytes

- Viewed (0)

github.com/istio/istio

operator/cmd/mesh/testdata/manifest-generate/output/ingressgateway_k8s_settings.golden.yaml

          valueFrom:
            resourceFieldRef:
              resource: limits.cpu
        - name: SERVICE_ACCOUNT
          valueFrom:
            fieldRef:
              fieldPath: spec.serviceAccountName
        - name: ISTIO_META_WORKLOAD_NAME
          value: istio-ingressgateway
        - name: ISTIO_META_OWNER
          value: kubernetes://apis/apps/v1/namespaces/istio-system/deployments/istio-ingressgateway

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri Dec 01 22:07:45 UTC 2023

- 14.3K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-control/istio-discovery/files/grpc-agent.yaml

  - name: istio-certs
    secret:
      optional: true
      {{ if eq .Spec.ServiceAccountName "" }}
      secretName: istio.default
      {{ else -}}
      secretName: {{  printf "istio.%s" .Spec.ServiceAccountName }}
      {{  end -}}
  {{- end }}
    {{- if isset .ObjectMeta.Annotations `sidecar.istio.io/userVolume` }}

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri Apr 26 16:51:17 UTC 2024

- 12.1K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

staging/src/k8s.io/client-go/applyconfigurations/core/v1/podspec.go

	NodeSelector                  map[string]string                            `json:"nodeSelector,omitempty"`
	ServiceAccountName            *string                                      `json:"serviceAccountName,omitempty"`
	DeprecatedServiceAccount      *string                                      `json:"serviceAccount,omitempty"`

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Thu Nov 10 19:22:42 UTC 2022

- 23.9K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-ingress/templates/deployment.yaml

      securityContext:
{{- if not (eq .Values.global.platform "openshift") }}
        runAsUser: 1337
        runAsGroup: 1337
{{- end }}
        runAsNonRoot: true
{{- end }}
      serviceAccountName: {{ $gateway.name }}-service-account
{{- if .Values.global.priorityClassName }}
      priorityClassName: "{{ .Values.global.priorityClassName }}"
{{- end }}
{{- if .Values.global.proxy.enableCoreDump }}

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Apr 18 18:16:49 UTC 2024

- 12.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateways/istio-egress/templates/deployment.yaml

      securityContext:
{{- if not (eq .Values.global.platform "openshift") }}
        runAsUser: 1337
        runAsGroup: 1337
{{- end }}
        runAsNonRoot: true
{{- end }}
      serviceAccountName: {{ $gateway.name }}-service-account
{{- if .Values.global.priorityClassName }}
      priorityClassName: "{{ .Values.global.priorityClassName }}"
{{- end }}
{{- if .Values.global.proxy.enableCoreDump }}

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Apr 18 18:16:49 UTC 2024

- 12.1K bytes

- Viewed (0)

github.com/istio/istio

security/pkg/server/ca/node_auth_test.go

				pods = append(pods, &v1.Pod{
					ObjectMeta: metav1.ObjectMeta{
						Name:      p.name,
						Namespace: p.namespace,
						UID:       types.UID(p.uid),
					},
					Spec: v1.PodSpec{
						ServiceAccountName: p.account,
						NodeName:           p.node,
					},
				})
			}
			c := kube.NewFakeClient(pods...)
			na := NewClusterNodeAuthorizer(c, tt.trustedAccounts)
			c.RunAndWait(test.NewStop(t))

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Wed Feb 28 16:41:38 UTC 2024

- 10.5K bytes

- Viewed (0)

github.com/istio/istio

pkg/test/framework/components/echo/config.go

	NamespaceName() string

	// NamespacedName returns the namespaced name for this service.
	// Short form for Config().NamespacedName().
	NamespacedName() NamespacedName

	// ServiceAccountName returns the service account string for this service.
	ServiceAccountName() string

	// ClusterLocalFQDN returns the fully qualified domain name for cluster-local host.
	ClusterLocalFQDN() string

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu May 09 12:26:52 UTC 2024

- 18.2K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/list.yaml.injected

            valueFrom:
              fieldRef:
                fieldPath: status.podIP
          - name: SERVICE_ACCOUNT
            valueFrom:
              fieldRef:
                fieldPath: spec.serviceAccountName
          - name: HOST_IP
            valueFrom:
              fieldRef:
                fieldPath: status.hostIP
          - name: ISTIO_CPU_LIMIT
            valueFrom:
              resourceFieldRef:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 14.2K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/hello-multi.yaml.injected

          valueFrom:
            fieldRef:
              fieldPath: status.podIP
        - name: SERVICE_ACCOUNT
          valueFrom:
            fieldRef:
              fieldPath: spec.serviceAccountName
        - name: HOST_IP
          valueFrom:
            fieldRef:
              fieldPath: status.hostIP
        - name: ISTIO_CPU_LIMIT
          valueFrom:
            resourceFieldRef:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 13.2K bytes

- Viewed (0)

Search Options