- Sort Score
- Result 10 results
- Languages All
Results 51 - 60 of 63 for requestAuthentications (0.4 sec)
-
manifests/addons/dashboards/istio-mesh-dashboard.json
}, "expr": "max(pilot_k8s_cfg_events{type=\"RequestAuthentication\", event=\"add\"}) - (max(pilot_k8s_cfg_events{type=\"RequestAuthentication\", event=\"delete\"}) or max(up * 0))", "format": "time_series", "intervalFactor": 1, "refId": "A" } ], "title": "RequestAuthentication Policies", "type": "stat" }, { "datasource": {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Mar 28 02:28:01 UTC 2024 - 46.4K bytes - Viewed (0) -
tests/integration/security/policy_attachment_only/jwt_gateway_test.go
WithAuthz(jwt.TokenIssuer1). Build() opts.Check = check.OK() }, }, { name: "deny with sub-1 token due to ignored RequestAuthentication", customizeCall: func(opts *echo.CallOptions, to echo.Target) { opts.HTTP.Path = "/" opts.HTTP.Headers = headers.New(). WithHost(fmt.Sprintf("example.%s.com", to.ServiceName())).
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 08 22:02:59 UTC 2024 - 9.7K bytes - Viewed (0) -
pilot/pkg/xds/eds.go
// Map of all configs that do not impact EDS var skippedEdsConfigs = sets.New( kind.Gateway, kind.VirtualService, kind.WorkloadGroup, kind.AuthorizationPolicy, kind.RequestAuthentication, kind.Secret, kind.Telemetry, kind.WasmPlugin, kind.ProxyConfig, kind.DNSName, kind.KubernetesGateway, kind.HTTPRoute, kind.TCPRoute, kind.TLSRoute, kind.GRPCRoute, )
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Apr 02 15:58:06 UTC 2024 - 9.9K bytes - Viewed (0) -
pilot/pkg/features/pilot.go
).Get() JwksFetchMode = func() jwt.JwksFetchMode { v := env.Register( "PILOT_JWT_ENABLE_REMOTE_JWKS", "false", "Mode of fetching JWKs from JwksUri in RequestAuthentication. Supported value: "+ "istiod, false, hybrid, true, envoy. The client fetching JWKs is as following: "+ "istiod/false - Istiod; hybrid/true - Envoy and fallback to Istiod if JWKs server is external; "+
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 13 17:48:28 UTC 2024 - 13.3K bytes - Viewed (0) -
tests/integration/security/fuzz/fuzz_test.go
spec: action: DENY rules: - to: - operation: paths: ["/private/secret.html"] ` jwtTool = "jwttool" requestAuthnPolicy = ` apiVersion: security.istio.io/v1 kind: RequestAuthentication metadata: name: jwt spec: jwtRules: - issuer: "******@****.***" jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.10/tests/common/jwt/jwks.json"
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 08 22:02:59 UTC 2024 - 12.9K bytes - Viewed (0) -
tests/integration/security/jwt_test.go
WithAuthz(jwt.TokenIssuer1). Build() opts.Check = check.OK() }, }, { name: "allow with sub-1 token despite \"ignored\" RequestAuthentication (enableGatewayAPISelectorPolicies flag = true)", customizeCall: func(opts *echo.CallOptions, to echo.Target) { opts.HTTP.Path = "/" opts.HTTP.Headers = headers.New().
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 08 22:02:59 UTC 2024 - 25.3K bytes - Viewed (0) -
pilot/pkg/model/push_context.go
} } // add services from RequestAuthentication.JwtRules.JwksUri if features.JwksFetchMode != jwt.Istiod { forWorkload := PolicyMatcherForProxy(proxy) jwtPolicies := ps.AuthnPolicies.GetJwtPoliciesForWorkload(forWorkload) for _, cfg := range jwtPolicies { rules := cfg.Spec.(*v1beta1.RequestAuthentication).JwtRules for _, r := range rules {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed May 15 09:02:11 UTC 2024 - 91.8K bytes - Viewed (0) -
pkg/config/analysis/analyzers/analyzers_test.go
{ name: "KubernetesGatewaySelector", inputFiles: []string{"testdata/k8sgateway-selector.yaml"}, analyzer: &k8sgateway.SelectorAnalyzer{}, expected: []message{ {msg.IneffectiveSelector, "RequestAuthentication default/ra-ineffective"}, {msg.IneffectiveSelector, "AuthorizationPolicy default/ap-ineffective"}, {msg.IneffectiveSelector, "WasmPlugin default/wasmplugin-ineffective"},
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Jun 14 07:22:31 UTC 2024 - 42.6K bytes - Viewed (0) -
pilot/pkg/model/sidecar.go
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 05 20:32:23 UTC 2024 - 38.4K bytes - Viewed (0) -
samples/addons/grafana.yaml
o"},"pluginVersion":"10.1.5","targets":[{"datasource":{"type":"prometheus","uid":"${datasource}"},"expr":"max(pilot_k8s_cfg_events{type=\"RequestAuthentication\", event=\"add\"}) - (max(pilot_k8s_cfg_events{type=\"RequestAuthentication\", event=\"delete\"}) or max(up * 0))","format":"time_series","intervalFactor":1,"refId":"A"}],"title":"RequestAuthentication Policies","type":"stat"},{"datasource":{"type":"prometheus","uid":"${datasource}"},"fieldConfig":{"defaults":{"color":{"fixedColor":"rgb(31,...
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 12 20:46:28 UTC 2024 - 242.3K bytes - Viewed (0)