commit 7709c1769692d893f88ea61cbe4e54e377b72829
author AndrewLamb <andrew.a.lamb@est.tech> Fri May 12 15:37:14 2023 +0100
committer Andreas Geissler <andreas-geissler@telekom.de> Tue Jun 20 06:56:22 2023 +0000
tree af2d13d2dfb1a83b8d612010bcc2a36b6980c329
parent 351be1d7603428a807d1e78073ce679b5d713419

[SDNC] Create Authorization Policies for SDNC

Add initial authorized serviceaccounts for each SDNC service

Issue-ID: OOM-3131
Change-Id: I56db8f5d16ec15400fdd240c5a0126e2381f7237
Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>

kubernetes/sdnc/components/sdnc-web/values.yaml

diff --git a/kubernetes/sdnc/components/sdnc-web/values.yaml b/kubernetes/sdnc/components/sdnc-web/values.yaml
index 3563eb7..391ef04 100644
--- a/kubernetes/sdnc/components/sdnc-web/values.yaml
+++ b/kubernetes/sdnc/components/sdnc-web/values.yaml
@@ -81,6 +81,12 @@
     name: "sdnc-web"
     port: 8080
 
+serviceMesh:
+  authorizationPolicy:
+    authorizedPrincipals:
+      - serviceAccount: istio-ingress
+        namespace: istio-ingress
+
 #Resource limit flavor -By default using small
 flavor: small
 #segregation for different environment (small and large)