- Sort Score
- Result 10 results
- Languages All
Results 11 - 20 of 49 for Citadel (0.18 sec)
-
operator/cmd/mesh/testdata/manifest-generate/input/gateways.yaml
- port: 15011 name: grpc-pilot-mtls - port: 8060 targetPort: 8060 name: tcp-citadel-grpc-tls # Port 5353 is forwarded to kube-dns - port: 5353 name: tcp-dns overlays: - kind: Deployment name: ilb-gateway patches:
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Apr 18 18:16:49 UTC 2024 - 1.5K bytes - Viewed (0) -
security/pkg/pki/util/generate_cert.go
// CA private key. Only called by a self-signed Citadel. func GenRootCertFromExistingKey(options CertOptions) (pemCert []byte, pemKey []byte, err error) { if !options.IsSelfSigned || len(options.SignerPrivPem) == 0 { return nil, nil, fmt.Errorf("skip cert " + "generation. Citadel is not in self-signed mode or CA private key is not " + "available") }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Aug 02 14:34:38 UTC 2023 - 14.2K bytes - Viewed (0) -
security/pkg/nodeagent/caclient/providers/citadel/leak_test.go
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. package citadel import ( "testing" "istio.io/istio/tests/util/leak" ) func TestMain(m *testing.M) { // CheckMain asserts that no goroutines are leaked after a test package exits. leak.CheckMain(m)
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Apr 24 21:03:23 UTC 2024 - 792 bytes - Viewed (0) -
README.md
- [security](security/). This directory contains [security](https://istio.io/latest/docs/concepts/security/) related code, including Citadel (acting as Certificate Authority), citadel agent, etc. - [istio/proxy](https://github.com/istio/proxy). The Istio proxy contains extensions to the [Envoy proxy](https://github.com/envoyproxy/envoy) (in the form of
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Jan 26 15:28:59 UTC 2024 - 6.6K bytes - Viewed (0) -
pkg/test/framework/components/istio/ca.go
} a, err := i.InternalDiscoveryAddressFor(c) if err != nil { return Cert{}, err } client, err := newCitadelClient(a, []byte(rootCert)) if err != nil { return Cert{}, fmt.Errorf("creating citadel client: %v", err) } req := &pb.IstioCertificateRequest{ Csr: string(csrPEM), ValidityDuration: int64((time.Hour * 24 * 7).Seconds()), }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Mar 27 16:59:05 UTC 2024 - 4.5K bytes - Viewed (0) -
samples/sleep/sleep-vault.yaml
metadata: name: sleep spec: replicas: 1 selector: matchLabels: app: sleep template: metadata: labels: app: sleep spec: serviceAccountName: vault-citadel-sa containers: - name: sleep image: curlimages/curl command: ["/bin/sleep", "infinity"] imagePullPolicy: IfNotPresent
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 22 13:58:53 UTC 2022 - 1.4K bytes - Viewed (0) -
architecture/security/istio-agent.md
## Configuration | Variable | Description | | - | - | |CA_ADDR|Address of CA, defaults to discoveryAddress| |CA_PROVIDER|Type of CA; supported values are GoogleCA or Citadel (although anything but GoogleCA will use Citadel); defaults to Citadel| |PROV_CERT|certificates to be used for mTLS communication with control plane only; NOT for workload mTLS|
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Aug 22 16:45:50 UTC 2023 - 7.2K bytes - Viewed (0) -
samples/httpbin/httpbin-vault.yaml
selector: matchLabels: app: httpbin version: v1 template: metadata: labels: app: httpbin version: v1 spec: serviceAccountName: vault-citadel-sa containers: - image: docker.io/kong/httpbin imagePullPolicy: IfNotPresent name: httpbin # Same as found in Dockerfile's CMD but using an unprivileged port command:
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Dec 04 03:54:58 UTC 2023 - 1.8K bytes - Viewed (0) -
security/pkg/k8s/controller/casecret.go
v1 "k8s.io/api/core/v1" metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" corev1 "k8s.io/client-go/kubernetes/typed/core/v1" "istio.io/istio/pkg/log" ) var k8sControllerLog = log.RegisterScope("secretcontroller", "Citadel kubernetes controller log") // CaSecretController manages the self-signed signing CA secret. type CaSecretController struct { client corev1.CoreV1Interface }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue May 23 17:08:31 UTC 2023 - 2.6K bytes - Viewed (0) -
pkg/version/cobra_test.go
}, { Component: "Injector", Revision: "default", Info: BuildInfo{"1.2.0", "gitSHAabc", "go1.10.1", "Modified", "tag"}, }, { Component: "Citadel", Revision: "default", Info: BuildInfo{"1.2.0", "gitSHA321", "go1.11.0", "Clean", "tag"}, }, } var meshInfoMultiVersion = MeshInfo{ { Component: "Pilot", Revision: "default",
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Aug 29 14:15:26 UTC 2023 - 8.5K bytes - Viewed (0)