diff options
| author |   AndrewLamb <andrew.a.lamb@est.tech> | 2023-04-20 16:24:13 +0100 |
|---|---|---|
| committer | AndrewLamb <andrew.a.lamb@est.tech> | 2023-04-21 14:23:45 +0100 |
| commit | 7ef78aefe4cf6dba1e14add5602f4df55862c9b4 (patch) | |
| tree | 8a30c680e9e07514eb0662762609b3de6055bad5 /kubernetes/common | |
| parent | 9d4d923694a16dfe53adf262091eba61e4a3cb56 (diff) | |
[POLICY][COMMON] Create Authorization Policies for Policy
Policy- Add initial authorized serviceaccounts for each sub component service
Common- Change authorizationpolicy to match on the label app
Issue-ID: OOM-3139
Change-Id: I411877b933d6dfcbdee633f1440d16c9658438e5
Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
Diffstat (limited to 'kubernetes/common')
| -rw-r--r-- | kubernetes/common/common/templates/_serviceMesh.tpl | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/kubernetes/common/common/templates/_serviceMesh.tpl b/kubernetes/common/common/templates/_serviceMesh.tpl index 3ba945ee8b..a3d269e4f2 100644 --- a/kubernetes/common/common/templates/_serviceMesh.tpl +++ b/kubernetes/common/common/templates/_serviceMesh.tpl @@ -95,7 +95,7 @@ true spec: selector: matchLabels: - app.kubernetes.io/name: <app-to-match> ("app.kubernetes.io/name" corresponds to key defined in "common.labels", which is included in "common.service") + app: <app-to-match> ("app" corresponds to a key defined in "common.labels", which is included in "common.service") If common.useAuthorizationPolicies returns false: Will not create an authorization policy @@ -115,7 +115,7 @@ metadata: spec: selector: matchLabels: - app.kubernetes.io/name: {{ include "common.servicename" . }} + app: {{ include "common.servicename" . }} action: ALLOW rules: {{- if $authorizedPrincipals }} |