- Sort Score
- Result 10 results
- Languages All
Results 81 - 90 of 929 for authn (0.04 sec)
-
pilot/pkg/model/authentication_test.go
) var baseTimestamp = time.Date(2020, 2, 2, 2, 2, 2, 0, time.UTC) func TestGetPoliciesForWorkload(t *testing.T) { policies := getTestAuthenticationPolicies(createTestConfigs(true /* with mesh peer authn */), t) cases := []struct { name string workloadNamespace string workloadLabels labels.Instance wantRequestAuthn []*config.Config wantPeerAuthn []*config.Config
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Apr 17 22:20:44 UTC 2024 - 45.1K bytes - Viewed (0) -
security/pkg/server/ca/node_auth.go
return (*na).authenticateImpersonation(caller, requestedIdentityString) } // ClusterNodeAuthorizer is a component that implements a subset of Kubernetes Node Authorization // (https://kubernetes.io/docs/reference/access-authn-authz/node/) for Istio CA within one cluster. // Specifically, it validates that a node proxy which requests certificates for workloads on its // own node is requesting valid identities which run on that node (rather than arbitrary ones).
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Feb 28 16:41:38 UTC 2024 - 6.4K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/webhook/webhook_v1beta1_test.go
if err != nil { return nil, err } authn, err := newWithBackoff(c, testRetryBackoff, implicitAuds, 10*time.Second, AuthenticatorMetrics{ RecordRequestTotal: noopMetrics{}.RequestTotal, RecordRequestLatency: noopMetrics{}.RequestLatency, }) if err != nil { return nil, err } return cache.New(authn, false, cacheTime, cacheTime), nil }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Mar 18 00:47:42 UTC 2022 - 19.2K bytes - Viewed (0) -
docs/sts/README.md
- Temporary credentials have a limited lifetime, there is no need to rotate them or explicitly revoke them. Expired temporary credentials cannot be reused. ## Identity Federation | AuthN | Description |
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Tue Oct 25 00:44:15 UTC 2022 - 7.8K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/webhook/webhook_v1_test.go
} c, err := tokenReviewInterfaceFromConfig(clientConfig, "v1", testRetryBackoff) if err != nil { return nil, err } authn, err := newWithBackoff(c, testRetryBackoff, implicitAuds, 10*time.Second, metrics) if err != nil { return nil, err } return cache.New(authn, false, cacheTime, cacheTime), nil } func TestV1TLSConfig(t *testing.T) { tests := []struct {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Mar 18 00:47:42 UTC 2022 - 19.1K bytes - Viewed (0) -
tests/integration/security/policy_attachment_only/jwt_gateway_test.go
Run(func(t framework.TestContext) { crd.DeployGatewayAPIOrSkip(t) config.New(t). Source(config.File("testdata/authz/gateway-api.yaml.tmpl").WithParams(param.Params{ param.Namespace.String(): apps.Namespace, })). Source(config.File("testdata/authz/gateway-authz.yaml.tmpl").WithParams(param.Params{ param.Namespace.String(): apps.Namespace, "Services": apps.A.Append(apps.B).Services(),
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 08 22:02:59 UTC 2024 - 9.7K bytes - Viewed (0) -
cmd/logging.go
logger.LogIf(ctx, "admin", err, errKind...) } func authNLogIf(ctx context.Context, err error, errKind ...interface{}) { logger.LogIf(ctx, "authN", err, errKind...) } func authZLogIf(ctx context.Context, err error, errKind ...interface{}) { logger.LogIf(ctx, "authZ", err, errKind...) } func peersLogIf(ctx context.Context, err error, errKind ...interface{}) { if !errors.Is(err, grid.ErrDisconnected) {
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Thu Jun 13 22:26:38 UTC 2024 - 7.2K bytes - Viewed (0) -
cmd/sts-handlers.go
return ErrSTSAccessDenied } } func checkAssumeRoleAuth(ctx context.Context, r *http.Request) (auth.Credentials, APIErrorCode) { if !isRequestSignatureV4(r) { return auth.Credentials{}, ErrAccessDenied } s3Err := isReqAuthenticated(ctx, r, globalSite.Region(), serviceSTS) if s3Err != ErrNone { return auth.Credentials{}, s3Err } user, _, s3Err := getReqAccessKeyV4(r, globalSite.Region(), serviceSTS)
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Tue Jun 11 03:13:30 UTC 2024 - 33.9K bytes - Viewed (0) -
istioctl/pkg/authz/testdata/configdump.yaml
{ "name": "istio_authn", "typed_config": { "@type": "type.googleapis.com/udpa.type.v1.TypedStruct", "type_url": "type.googleapis.com/io.istio.network.authn.Config" } }, { "name": "istio.metadata_exchange", "typed_config": {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 21 14:20:23 UTC 2023 - 206.7K bytes - Viewed (1) -
staging/src/k8s.io/apiserver/pkg/util/webhook/authentication.go
// rest.Config generated by the resolver. type AuthenticationInfoResolverWrapper func(AuthenticationInfoResolver) AuthenticationInfoResolver // NewDefaultAuthenticationInfoResolverWrapper builds a default authn resolver wrapper func NewDefaultAuthenticationInfoResolverWrapper( proxyTransport *http.Transport, egressSelector *egressselector.EgressSelector, kubeapiserverClientConfig *rest.Config,
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Thu Jun 29 15:48:39 UTC 2023 - 9.5K bytes - Viewed (0)