diff options
| author |   AndrewLamb <andrew.a.lamb@est.tech> | 2023-05-04 15:56:49 +0100 |
|---|---|---|
| committer |   Andreas Geissler <andreas-geissler@telekom.de> | 2023-05-26 06:51:30 +0000 |
| commit | bd6ff6b619dc497cd08946541d2fda7f89684357 (patch) | |
| tree | c4741a0a33ef962f869a53c2b5f99e046574ce37 /kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml | |
| parent | 7258874e2d9a2d21bf017b1dd6276bb0399151be (diff) | |
[DCAEGEN2] Create Authorization Policies for DCAE
Add initial authorized serviceaccounts for each sub component service
Issue-ID: OOM-3132
Change-Id: I984d5aef78836e066d800bf739619f556f9adbfe
Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
Diffstat (limited to 'kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml')
| -rw-r--r-- | kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml b/kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml index 552e00cfbd..8c3fb48264 100644 --- a/kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml +++ b/kubernetes/dcaegen2-services/components/dcae-datalake-feeder/values.yaml @@ -80,6 +80,15 @@ service: port: 1680 port_protocol: http +serviceMesh: + authorizationPolicy: + authorizedPrincipals: + - serviceAccount: dcae-datalake-admin-ui-read + - serviceAccount: dcae-datalake-des-read + authorizedPrincipalsPostgres: + - serviceAccount: dcae-datalake-des-read + - serviceAccount: dcae-datalake-feeder-read + credentials: - name: PG_USER uid: *pgUserCredsSecretUid |