diff options
| author |   AndrewLamb <andrew.a.lamb@est.tech> | 2023-04-20 16:24:13 +0100 |
|---|---|---|
| committer | AndrewLamb <andrew.a.lamb@est.tech> | 2023-04-21 14:23:45 +0100 |
| commit | 7ef78aefe4cf6dba1e14add5602f4df55862c9b4 (patch) | |
| tree | 8a30c680e9e07514eb0662762609b3de6055bad5 /kubernetes/policy/components/policy-xacml-pdp/values.yaml | |
| parent | 9d4d923694a16dfe53adf262091eba61e4a3cb56 (diff) | |
[POLICY][COMMON] Create Authorization Policies for Policy
Policy- Add initial authorized serviceaccounts for each sub component service
Common- Change authorizationpolicy to match on the label app
Issue-ID: OOM-3139
Change-Id: I411877b933d6dfcbdee633f1440d16c9658438e5
Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
Diffstat (limited to 'kubernetes/policy/components/policy-xacml-pdp/values.yaml')
| -rwxr-xr-x | kubernetes/policy/components/policy-xacml-pdp/values.yaml | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/kubernetes/policy/components/policy-xacml-pdp/values.yaml b/kubernetes/policy/components/policy-xacml-pdp/values.yaml index 44ae16de1d..222da883cb 100755 --- a/kubernetes/policy/components/policy-xacml-pdp/values.yaml +++ b/kubernetes/policy/components/policy-xacml-pdp/values.yaml @@ -102,6 +102,31 @@ service: ingress: enabled: false +serviceMesh: + authorizationPolicy: + authorizedPrincipals: + - serviceAccount: dcae-datafile-collector-read + - serviceAccount: dcae-datalake-admin-ui-read + - serviceAccount: dcae-datalake-des-read + - serviceAccount: dcae-datalake-feeder-read + - serviceAccount: dcae-heartbeat-read + - serviceAccount: dcae-hv-ves-collector-read + - serviceAccount: dcae-kpi-ms-read + - serviceAccount: dcae-pm-mapper-read + - serviceAccount: dcae-pmsh-read + - serviceAccount: dcae-prh-read + - serviceAccount: dcae-restconf-collector-read + - serviceAccount: dcae-slice-analysis-ms-read + - serviceAccount: dcae-snmptrap-collector-read + - serviceAccount: dcae-son-handler-read + - serviceAccount: dcae-tcagen2-read + - serviceAccount: dcae-ves-collector-read + - serviceAccount: dcae-ves-mapper-read + - serviceAccount: dcae-ves-openapi-manager-read + - serviceAccount: message-router-read + - serviceAccount: oof-read + - serviceAccount: sdnc-read + flavor: small resources: small: |