install/msb-rbac.yaml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

apiVersion: "rbac.istio.io/v1alpha1"
kind: ServiceRole
metadata:
  name: msb 
  namespace: onap 
spec:
  rules:
  - services: ["*"]
    methods: ["GET"]
---
apiVersion: "rbac.istio.io/v1alpha1"
kind: ServiceRoleBinding
metadata:
  name: bind-service-msb
  namespace: onap 
spec:
  subjects:
  - user: "cluster.local/ns/onap/sa/msb"
  roleRef:
    kind: ServiceRole
    name: "msb"