From 70dd04d817b1505aca9aa38d87bddf210b6c8e54 Mon Sep 17 00:00:00 2001 From: Pramod Date: Mon, 26 Aug 2019 19:31:18 -0700 Subject: Add helm chart for Istio Policies Issue-ID: MULTICLOUD-789 Signed-off-by: Pramod Change-Id: I16d1c1df0e9d8955040c78f5e67e1dd50e761040 --- .../helm/servicemesh/policy/templates/policy.yaml | 33 ++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 deployments/helm/servicemesh/policy/templates/policy.yaml (limited to 'deployments/helm/servicemesh/policy/templates/policy.yaml') diff --git a/deployments/helm/servicemesh/policy/templates/policy.yaml b/deployments/helm/servicemesh/policy/templates/policy.yaml new file mode 100644 index 00000000..fa51cedf --- /dev/null +++ b/deployments/helm/servicemesh/policy/templates/policy.yaml @@ -0,0 +1,33 @@ +{{/* +# Copyright 2019 Intel Corporation, Inc +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +*/}} +apiVersion: "authentication.istio.io/v1alpha1" +kind: "Policy" +metadata: + name: {{ template "fullname" . }} + namespace: istio-system + labels: + chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} + release: {{ .Release.Name }} +spec: + targets: + - name: {{ .Values.targetservice }} + peers: + - mtls: {} + origins: + - jwt: + issuer: {{ .Values.jwtissuer }} + jwksUri: {{ .Values.jwksUri }} + principalBinding: USE_ORIGIN -- cgit 1.2.3-korg