summaryrefslogtreecommitdiffstats
path: root/kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml
diff options
context:
space:
mode:
authorAndrewLamb <andrew.a.lamb@est.tech>2023-05-04 15:56:49 +0100
committerAndreas Geissler <andreas-geissler@telekom.de>2023-05-26 06:51:30 +0000
commitbd6ff6b619dc497cd08946541d2fda7f89684357 (patch)
treec4741a0a33ef962f869a53c2b5f99e046574ce37 /kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml
parent7258874e2d9a2d21bf017b1dd6276bb0399151be (diff)
[DCAEGEN2] Create Authorization Policies for DCAE
Add initial authorized serviceaccounts for each sub component service Issue-ID: OOM-3132 Change-Id: I984d5aef78836e066d800bf739619f556f9adbfe Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
Diffstat (limited to 'kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml')
-rw-r--r--kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml9
1 files changed, 9 insertions, 0 deletions
diff --git a/kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml b/kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml
index 552e00cfbd..8c3fb48264 100644
--- a/kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml
+++ b/kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml
@@ -80,6 +80,15 @@ service:
port: 1680
port_protocol: http
+serviceMesh:
+ authorizationPolicy:
+ authorizedPrincipals:
+ - serviceAccount: dcae-datalake-admin-ui-read
+ - serviceAccount: dcae-datalake-des-read
+ authorizedPrincipalsPostgres:
+ - serviceAccount: dcae-datalake-des-read
+ - serviceAccount: dcae-datalake-feeder-read
+
credentials:
- name: PG_USER
uid: *pgUserCredsSecretUid