| commit | 7ef78aefe4cf6dba1e14add5602f4df55862c9b4 | [log] [tgz] |
|---|---|---|
| author | AndrewLamb <andrew.a.lamb@est.tech> | Thu Apr 20 16:24:13 2023 +0100 |
| committer | AndrewLamb <andrew.a.lamb@est.tech> | Fri Apr 21 14:23:45 2023 +0100 |
| tree | 8a30c680e9e07514eb0662762609b3de6055bad5 | |
| parent | 9d4d923694a16dfe53adf262091eba61e4a3cb56 [diff] [blame] |
[POLICY][COMMON] Create Authorization Policies for Policy Policy- Add initial authorized serviceaccounts for each sub component service Common- Change authorizationpolicy to match on the label app Issue-ID: OOM-3139 Change-Id: I411877b933d6dfcbdee633f1440d16c9658438e5 Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
diff --git a/kubernetes/policy/components/policy-clamp-ac-http-ppnt/values.yaml b/kubernetes/policy/components/policy-clamp-ac-http-ppnt/values.yaml index 6f60fec..df8896f 100644 --- a/kubernetes/policy/components/policy-clamp-ac-http-ppnt/values.yaml +++ b/kubernetes/policy/components/policy-clamp-ac-http-ppnt/values.yaml
@@ -64,6 +64,11 @@ ingress: enabled: false +serviceMesh: + authorizationPolicy: + authorizedPrincipals: + - serviceAccount: message-router-read + # probe configuration parameters liveness: initialDelaySeconds: 20