diff options
author | AndrewLamb <andrew.a.lamb@est.tech> | 2023-04-20 16:24:13 +0100 |
---|---|---|
committer | AndrewLamb <andrew.a.lamb@est.tech> | 2023-04-21 14:23:45 +0100 |
commit | 7ef78aefe4cf6dba1e14add5602f4df55862c9b4 (patch) | |
tree | 8a30c680e9e07514eb0662762609b3de6055bad5 /kubernetes/policy/components/policy-clamp-runtime-acm/values.yaml | |
parent | 9d4d923694a16dfe53adf262091eba61e4a3cb56 (diff) |
[POLICY][COMMON] Create Authorization Policies for Policy
Policy- Add initial authorized serviceaccounts for each sub component service
Common- Change authorizationpolicy to match on the label app
Issue-ID: OOM-3139
Change-Id: I411877b933d6dfcbdee633f1440d16c9658438e5
Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
Diffstat (limited to 'kubernetes/policy/components/policy-clamp-runtime-acm/values.yaml')
-rw-r--r-- | kubernetes/policy/components/policy-clamp-runtime-acm/values.yaml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/kubernetes/policy/components/policy-clamp-runtime-acm/values.yaml b/kubernetes/policy/components/policy-clamp-runtime-acm/values.yaml index 0ec4be4726..cb73314f1d 100644 --- a/kubernetes/policy/components/policy-clamp-runtime-acm/values.yaml +++ b/kubernetes/policy/components/policy-clamp-runtime-acm/values.yaml @@ -119,6 +119,12 @@ service: ingress: enabled: false +serviceMesh: + authorizationPolicy: + authorizedPrincipals: + - serviceAccount: message-router-read + - serviceAccount: policy-gui-read + flavor: small resources: small: |