aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/dcaegen2-services/components/dcae-datafile-collector/values.yaml
diff options
context:
space:
mode:
authorAndrewLamb <andrew.a.lamb@est.tech>2023-05-04 15:56:49 +0100
committerAndreas Geissler <andreas-geissler@telekom.de>2023-05-26 06:51:30 +0000
commitbd6ff6b619dc497cd08946541d2fda7f89684357 (patch)
treec4741a0a33ef962f869a53c2b5f99e046574ce37 /kubernetes/dcaegen2-services/components/dcae-datafile-collector/values.yaml
parent7258874e2d9a2d21bf017b1dd6276bb0399151be (diff)
[DCAEGEN2] Create Authorization Policies for DCAE
Add initial authorized serviceaccounts for each sub component service Issue-ID: OOM-3132 Change-Id: I984d5aef78836e066d800bf739619f556f9adbfe Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
Diffstat (limited to 'kubernetes/dcaegen2-services/components/dcae-datafile-collector/values.yaml')
-rw-r--r--kubernetes/dcaegen2-services/components/dcae-datafile-collector/values.yaml8
1 files changed, 8 insertions, 0 deletions
diff --git a/kubernetes/dcaegen2-services/components/dcae-datafile-collector/values.yaml b/kubernetes/dcaegen2-services/components/dcae-datafile-collector/values.yaml
index 7c6b3e9649..ee21e10109 100644
--- a/kubernetes/dcaegen2-services/components/dcae-datafile-collector/values.yaml
+++ b/kubernetes/dcaegen2-services/components/dcae-datafile-collector/values.yaml
@@ -125,6 +125,14 @@ ingress:
config:
ssl: "redirect"
+serviceMesh:
+ authorizationPolicy:
+ authorizedPrincipals:
+ - serviceAccount: dcae-pm-mapper-read
+ - serviceAccount: message-router-read
+ - serviceAccount: istio-ingress
+ namespace: istio-ingress
+
# Data Router Publisher Credentials
drPubscriberCreds:
username: username