Workload - Code Search

pilot/pkg/serviceregistry/kube/controller/ambient/workloads.go

		a.serviceEntryWorkloadBuilder(MeshConfig, AuthorizationPolicies, PeerAuths, Waypoints, Namespaces),
		krt.WithName("ServiceEntryWorkloads"),
	)
	Workloads := krt.JoinCollection([]krt.Collection[model.WorkloadInfo]{PodWorkloads, WorkloadEntryWorkloads, ServiceEntryWorkloads}, krt.WithName("Workloads"))
	return Workloads
}

func (a *index) workloadEntryWorkloadBuilder(
	MeshConfig krt.Singleton[MeshConfig],

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Jun 13 16:51:29 UTC 2024

- 20.9K bytes

- Viewed (0)

github.com/istio/istio

architecture/ambient/peer-authentication.md

particular, ztunnel only supports 2 (custom) xDS resources: [`Workload`](../../pkg/workloadapi/workload.proto) and [`Authorization`](../../pkg/workloadapi/security/authorization.proto). As such, ztunnel does not receive `PeerAuthentication`s directly; when istiod detects a `PeerAuthentication` resource that targets an Ambient captured workload, it computes the effective policy for that workload (taking into account the mesh-wide -> namespace -> workload precedence rules) and sends that policy to ztunnel. The...

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Wed Aug 09 22:09:18 UTC 2023

- 3.9K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/list.yaml.injected

            timeoutSeconds: 3
          volumeMounts:
          - mountPath: /var/run/secrets/workload-spiffe-uds
            name: workload-socket
          - mountPath: /var/run/secrets/credential-uds
            name: credential-socket
          - mountPath: /var/run/secrets/workload-spiffe-credentials
            name: workload-certs
          - mountPath: /var/run/secrets/istio
            name: istiod-ca-cert

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 14.2K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/grpc-agent.yaml.injected

          requests:
            cpu: 100m
            memory: 128Mi
        volumeMounts:
        - mountPath: /var/run/secrets/workload-spiffe-uds
          name: workload-socket
        - mountPath: /var/run/secrets/workload-spiffe-credentials
          name: workload-certs
        - mountPath: /var/run/secrets/istio
          name: istiod-ca-cert
        - mountPath: /var/lib/istio/data
          name: istio-data

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 5.6K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/autoregistration/controller.go

	store model.ConfigStoreController

	// Note: unregister is to update the workload entry status: like setting `istio.io/disconnectedAt`
	// and make the workload entry enqueue `cleanupQueue`
	// cleanup is to delete the workload entry

	// queue contains workloadEntry that need to be unregistered
	queue controllers.Queue

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Apr 16 00:00:36 UTC 2024

- 26.4K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/traffic-params-empty-includes.yaml.injected

          timeoutSeconds: 3
        volumeMounts:
        - mountPath: /var/run/secrets/workload-spiffe-uds
          name: workload-socket
        - mountPath: /var/run/secrets/credential-uds
          name: credential-socket
        - mountPath: /var/run/secrets/workload-spiffe-credentials
          name: workload-certs
        - mountPath: /var/run/secrets/istio
          name: istiod-ca-cert

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 6.5K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/truncate-canonical-name-pod.yaml.injected

      periodSeconds: 1
      timeoutSeconds: 3
    volumeMounts:
    - mountPath: /var/run/secrets/workload-spiffe-uds
      name: workload-socket
    - mountPath: /var/run/secrets/credential-uds
      name: credential-socket
    - mountPath: /var/run/secrets/workload-spiffe-credentials
      name: workload-certs
    - mountPath: /var/run/secrets/istio
      name: istiod-ca-cert
    - mountPath: /var/lib/istio/data

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 5.7K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/multiple-templates.yaml.injected

          timeoutSeconds: 3
        volumeMounts:
        - mountPath: /var/run/secrets/workload-spiffe-uds
          name: workload-socket
        - mountPath: /var/run/secrets/credential-uds
          name: credential-socket
        - mountPath: /var/run/secrets/workload-spiffe-credentials
          name: workload-certs
        - mountPath: /var/run/secrets/istio
          name: istiod-ca-cert

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 6.5K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/pod.yaml.injected

      periodSeconds: 1
      timeoutSeconds: 3
    volumeMounts:
    - mountPath: /var/run/secrets/workload-spiffe-uds
      name: workload-socket
    - mountPath: /var/run/secrets/credential-uds
      name: credential-socket
    - mountPath: /var/run/secrets/workload-spiffe-credentials
      name: workload-certs
    - mountPath: /var/run/secrets/istio
      name: istiod-ca-cert
    - mountPath: /var/lib/istio/data

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 5.5K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/only-proxy-container.yaml.injected

          timeoutSeconds: 3
        volumeMounts:
        - mountPath: /var/run/secrets/workload-spiffe-uds
          name: workload-socket
        - mountPath: /var/run/secrets/credential-uds
          name: credential-socket
        - mountPath: /var/run/secrets/workload-spiffe-credentials
          name: workload-certs
        - mountPath: /var/run/secrets/istio
          name: istiod-ca-cert

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 6.3K bytes

- Viewed (0)

Search Options