- Sort Score
- Result 10 results
- Languages All
Results 61 - 70 of 416 for serviceAccounts (0.19 sec)
-
cmd/iam-store.go
cache := store.rlock() defer store.runlock() var serviceAccounts []auth.Credentials for _, u := range cache.iamUsersMap { v := u.Credentials if accessKey != "" && v.ParentUser == accessKey { if v.IsServiceAccount() { // Hide secret key & session key here v.SecretKey = "" v.SessionToken = "" serviceAccounts = append(serviceAccounts, v) } } }
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Thu Jun 13 22:26:38 UTC 2024 - 75.8K bytes - Viewed (0) -
cmd/kube-controller-manager/app/controllermanager.go
} tokenGenerator, err := serviceaccount.JWTTokenGenerator(serviceaccount.LegacyIssuer, privateKey) if err != nil { return nil, false, fmt.Errorf("failed to build token generator: %v", err) } tokenController, err := serviceaccountcontroller.NewTokensController( controllerContext.InformerFactory.Core().V1().ServiceAccounts(), controllerContext.InformerFactory.Core().V1().Secrets(),
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed May 01 13:03:53 UTC 2024 - 37.5K bytes - Viewed (0) -
pilot/pkg/serviceregistry/kube/controller/pod_test.go
}, }, metav1.CreateOptions{}) if err != nil { t.Fatalf("failed creating test namespace: %v", err) } // K8S 1.10 also checks if service account exists _, err = ki.CoreV1().ServiceAccounts(n).Create(context.TODO(), &v1.ServiceAccount{ ObjectMeta: metav1.ObjectMeta{ Name: "default", Annotations: map[string]string{ "kubernetes.io/enforce-mountable-secrets": "false", }, },
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Apr 16 18:27:40 UTC 2024 - 12.3K bytes - Viewed (0) -
pilot/pkg/serviceregistry/aggregate/controller_test.go
discovery1 := memory.NewServiceDiscovery(mock.HelloService) discovery2 := memory.NewServiceDiscovery(mock.MakeService(mock.ServiceArgs{ Hostname: mock.HelloService.Hostname, Address: "10.1.2.0", ServiceAccounts: []string{}, ClusterID: "cluster-2", }), mock.WorldService) registry1 := serviceregistry.Simple{ ProviderID: provider.Kubernetes, ClusterID: "cluster-1",
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed May 15 06:28:11 UTC 2024 - 14.5K bytes - Viewed (0) -
pilot/pkg/networking/core/cluster.go
}, } } subsetClusters := cb.applyDestinationRule(defaultCluster, DefaultClusterMode, service, port, clusterKey.endpointBuilder, clusterKey.destinationRule.GetRule(), clusterKey.serviceAccounts) if patched := cp.patch(nil, defaultCluster.build()); patched != nil { resources = append(resources, patched) if features.EnableCDSCaching { cb.cache.Add(&clusterKey, cb.req, patched) }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 13 01:56:28 UTC 2024 - 33K bytes - Viewed (0) -
pkg/volume/testing/volume_host.go
return func(namespace, name string, tr *authenticationv1.TokenRequest) (*authenticationv1.TokenRequest, error) { return f.kubeClient.CoreV1().ServiceAccounts(namespace).CreateToken(context.TODO(), name, tr, metav1.CreateOptions{}) } } func (f *fakeVolumeHost) DeleteServiceAccountTokenFunc() func(types.UID) { return func(types.UID) {} }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sat May 11 09:02:45 UTC 2024 - 16.5K bytes - Viewed (0) -
manifests/charts/istiod-remote/values.yaml
# Default behavior: latest images will be Always else IfNotPresent. imagePullPolicy: "" # ImagePullSecrets for all ServiceAccount, list of secrets in the same namespace # to use for pulling any images in pods that reference this ServiceAccount. # For components that don't use ServiceAccounts (i.e. grafana, servicegraph, tracing) # ImagePullSecrets will be added to the corresponding Deployment(StatefulSet) objects.
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Jun 03 01:55:05 UTC 2024 - 21K bytes - Viewed (0) -
pilot/pkg/networking/core/cluster_traffic_policy.go
if opts.clusterMode != SniDnatClusterMode { autoMTLSEnabled := opts.mesh.GetEnableAutoMtls().Value tls, mtlsCtxType := cb.buildUpstreamTLSSettings(tls, opts.serviceAccounts, opts.istioMtlsSni, autoMTLSEnabled, opts.meshExternal, opts.serviceMTLSMode) cb.applyUpstreamTLSSettings(&opts, tls, mtlsCtxType) cb.applyUpstreamProxyProtocol(&opts, proxyProtocol) } }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Apr 23 05:38:57 UTC 2024 - 20K bytes - Viewed (0) -
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/controller-roles.yaml
labels: kubernetes.io/bootstrapping: rbac-defaults name: system:controller:service-account-controller rules: - apiGroups: - "" resources: - serviceaccounts verbs: - create - apiGroups: - "" - events.k8s.io resources: - events verbs: - create - patch - update
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Mar 06 00:00:21 UTC 2024 - 26.6K bytes - Viewed (0) -
common-protos/k8s.io/api/flowcontrol/v1beta3/generated.proto
// +optional optional UserSubject user = 2; // `group` matches based on user group name. // +optional optional GroupSubject group = 3; // `serviceAccount` matches ServiceAccounts. // +optional optional ServiceAccountSubject serviceAccount = 4; } // UserSubject holds detailed information for user-kind subject. message UserSubject { // `name` is the username that matches, or "*" to match all usernames.
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Mar 11 18:43:24 UTC 2024 - 19.5K bytes - Viewed (0)