- Sort Score
- Result 10 results
- Languages All
Results 31 - 40 of 49 for Citadel (0.15 sec)
-
security/pkg/pki/ca/selfsignedcarootcertrotator.go
if ticker != nil { ticker.Stop() } return } } } } // checkAndRotateRootCert decides whether root cert should be refreshed, and rotates // root cert for self-signed Citadel. func (rotator *SelfSignedCARootCertRotator) checkAndRotateRootCert() { caSecret, scrtErr := rotator.caSecretController.LoadCASecretWithRetry(rotator.config.secretName,
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Nov 30 19:33:26 UTC 2023 - 10.4K bytes - Viewed (0) -
pilot/cmd/pilot-agent/options/options.go
"The output directory for the key and certificate. If empty, key and certificate will not be saved. "+ "Must be set for VMs using provisioning certificates.").Get() caProviderEnv = env.Register("CA_PROVIDER", "Citadel", "name of authentication provider").Get() caEndpointEnv = env.Register("CA_ADDR", "", "Address of the spiffe certificate provider. Defaults to discoveryAddress").Get()
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Jan 09 19:21:50 UTC 2024 - 8.1K bytes - Viewed (0) -
manifests/charts/README.md
As an extreme, the goal is to be possible to run Istio workloads in a cluster without installing any Istio component in that cluster. Currently, the minimum we require is the security provider (node agent or citadel). ### Install Istio CRDs This is the first step of the installation. Please do not remove or edit any CRD - config currently requires
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Feb 07 17:53:24 UTC 2024 - 6.7K bytes - Viewed (0) -
pkg/config/analysis/analyzers/testdata/common/sidecar-injector-configmap.yaml
:{"enabled":true,"suffix":"global"}},"istio-ingressgateway":{"applicationPorts":"","autoscaleEnabled":true,"debug":"info","domain":"","enabled":true,"meshExpansionPorts":[{"name":"tcp-pilot-grpc-tls","port":15011,"targetPort":15011},{"name":"tcp-citadel-grpc-tls","port":8060,"targetPort":8060},{"name":"tcp-dns-tls","port":853,"targetPort":853}],"namespace":"istio-system","ports":[{"name":"status-port","port":15020,"targetPort":15020},{"name":"http2","port":80,"targetPort":80},{"name":"https","po...
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Feb 21 03:10:21 UTC 2024 - 27.4K bytes - Viewed (0) -
pkg/config/analysis/analyzers/testdata/common/sidecar-injector-enabled-nsbydefault.yaml
:{"enabled":true,"suffix":"global"}},"istio-ingressgateway":{"applicationPorts":"","autoscaleEnabled":true,"debug":"info","domain":"","enabled":true,"meshExpansionPorts":[{"name":"tcp-pilot-grpc-tls","port":15011,"targetPort":15011},{"name":"tcp-citadel-grpc-tls","port":8060,"targetPort":8060},{"name":"tcp-dns-tls","port":853,"targetPort":853}],"namespace":"istio-system","ports":[{"name":"status-port","port":15020,"targetPort":15020},{"name":"http2","port":80,"targetPort":80},{"name":"https","po...
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Feb 21 03:10:21 UTC 2024 - 27.5K bytes - Viewed (0) -
security/pkg/nodeagent/caclient/providers/citadel/client_test.go
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. package citadel import ( "context" "crypto/tls" "fmt" "net" "path" "path/filepath" "reflect" "strings" "testing" "time" "google.golang.org/grpc" "google.golang.org/grpc/codes"
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Apr 24 21:03:23 UTC 2024 - 11.8K bytes - Viewed (0) -
security/pkg/pki/ca/selfsignedcarootcertrotator_test.go
func TestKeyCertBundleReloadInRootCertRotatorForSigningCitadel(t *testing.T) { rotator := getRootCertRotator(getDefaultSelfSignedIstioCAOptions(nil)) // Mutate the root cert and private key as if they are rotated by other Citadel. certItem0 := loadCert(rotator) oldRootCert := certItem0.rootCertInKeyCertBundle options := util.CertOptions{ TTL: rotator.config.caCertTTL, SignerPrivPem: certItem0.caSecret.Data[CAPrivateKeyFile],
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Oct 11 23:33:41 UTC 2023 - 14.1K bytes - Viewed (0) -
security/pkg/pki/ca/ca.go
type SigningCAFileBundle struct { RootCertFile string CertChainFiles []string SigningCertFile string SigningKeyFile string } var pkiCaLog = log.RegisterScope("pkica", "Citadel CA log") // caTypes is the enum for the CA type. type caTypes int type CertOpts struct { // SubjectIDs are used for building the SAN extension for the certificate. SubjectIDs []string
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Nov 30 19:33:26 UTC 2023 - 17.2K bytes - Viewed (0) -
pilot/pkg/model/gateway.go
// Note: Secrets that are not referenced by any Gateway, but are in the same namespace as the pod, are explicitly *not* // included. This ensures we don't give permission to unexpected secrets, such as the citadel root key/cert. VerifiedCertificateReferences sets.String } func (g *MergedGateway) HasAutoPassthroughGateways() bool { if g != nil { return g.ContainsAutoPassthroughGateways } return false }
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Jun 14 04:34:37 UTC 2024 - 26K bytes - Viewed (0) -
pkg/istio-agent/agent_test.go
for _, opt := range opts { resp = opt(resp) } ca := setupCa(t, resp.CaAuthenticator) resp.Security = security.Options{ CAEndpoint: ca.URL, CAProviderName: "Citadel", TrustDomain: "cluster.local", CredFetcher: plugin.CreateTokenPlugin(filepath.Join(env.IstioSrc, "pkg/istio-agent/testdata/token")), WorkloadNamespace: "namespace", ServiceAccount: "sa",
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu May 16 22:12:28 UTC 2024 - 33.4K bytes - Viewed (0)