Drop - Code Search

pkg/kube/inject/testdata/inject/prometheus-scrape.yaml.injected

      limits:
        cpu: "2"
        memory: 1Gi
      requests:
        cpu: 100m
        memory: 128Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      privileged: false
      readOnlyRootFilesystem: true
      runAsGroup: 1337
      runAsNonRoot: true
      runAsUser: 1337
    startupProbe:
      failureThreshold: 600

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 5.4K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/proxy-override-args.yaml.injected

            memory: 1Gi
          requests:
            cpu: 100m
            memory: 128Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsGroup: 1337
          runAsNonRoot: true
          runAsUser: 1337
        startupProbe:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 6.4K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/traffic-params-empty-includes.yaml.injected

            memory: 1Gi
          requests:
            cpu: 100m
            memory: 128Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsGroup: 1337
          runAsNonRoot: true
          runAsUser: 1337
        startupProbe:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 6.5K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/truncate-canonical-name-pod.yaml.injected

      limits:
        cpu: "2"
        memory: 1Gi
      requests:
        cpu: 100m
        memory: 128Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      privileged: false
      readOnlyRootFilesystem: true
      runAsGroup: 1337
      runAsNonRoot: true
      runAsUser: 1337
    startupProbe:
      failureThreshold: 600

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 5.7K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/multiple-templates.yaml.injected

            memory: 1Gi
          requests:
            cpu: 100m
            memory: 128Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsGroup: 1337
          runAsNonRoot: true
          runAsUser: 1337
        startupProbe:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 6.5K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/pod.yaml.injected

      limits:
        cpu: "2"
        memory: 1Gi
      requests:
        cpu: 100m
        memory: 128Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      privileged: false
      readOnlyRootFilesystem: true
      runAsGroup: 1337
      runAsNonRoot: true
      runAsUser: 1337
    startupProbe:
      failureThreshold: 600

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 5.5K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

pkg/proxy/nftables/README.md

  - We install a `reject` rule for ClusterIPs matching `@cluster-ips` set and a `drop`
    rule for ClusterIPs belonging to any of the ServiceCIDRs in `forward` and `output` hook, with a 
    higher (i.e. less urgent) priority than the DNAT chains making sure all valid
    traffic directed for ClusterIPs is already DNATed. Drop rule will only

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Sun Jan 21 14:37:56 UTC 2024

- 5.9K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/istio-cni/templates/daemonset.yaml

            # But we don't need _everything_ in `privileged`, so drop+readd capabilities based on feature.
            # privileged is redundant with CAP_SYS_ADMIN
            # since it's redundant, hardcode it to `true`, then manually drop ALL + readd granular
            # capabilities we actually require
            capabilities:
              drop:
              - ALL
              add:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri May 17 21:52:29 UTC 2024

- 7.9K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/startup_live.yaml.injected

            memory: 1Gi
          requests:
            cpu: 100m
            memory: 128Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsGroup: 1337
          runAsNonRoot: true
          runAsUser: 1337
        startupProbe:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 7.4K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/hello-probes.proxyHoldsApplication.yaml.injected

            memory: 1Gi
          requests:
            cpu: 100m
            memory: 128Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsGroup: 1337
          runAsNonRoot: true
          runAsUser: 1337
        startupProbe:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 7.6K bytes

- Viewed (0)

Search Options