aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/policy/components/policy-xacml-pdp/values.yaml
diff options
context:
space:
mode:
authorAndreas Geissler <andreas-geissler@telekom.de>2023-04-28 12:24:17 +0000
committerGerrit Code Review <gerrit@onap.org>2023-04-28 12:24:17 +0000
commit7448e0aef213763803a670d265ff9d4f6f96027e (patch)
tree239b64be57ef931fd7337e7a764f1ff53811fd47 /kubernetes/policy/components/policy-xacml-pdp/values.yaml
parenta041dbe508189d6bd67c3e172b21cfc31eb9c319 (diff)
parent7ef78aefe4cf6dba1e14add5602f4df55862c9b4 (diff)
Merge "[POLICY][COMMON] Create Authorization Policies for Policy"
Diffstat (limited to 'kubernetes/policy/components/policy-xacml-pdp/values.yaml')
-rwxr-xr-xkubernetes/policy/components/policy-xacml-pdp/values.yaml25
1 files changed, 25 insertions, 0 deletions
diff --git a/kubernetes/policy/components/policy-xacml-pdp/values.yaml b/kubernetes/policy/components/policy-xacml-pdp/values.yaml
index 44ae16de1d..222da883cb 100755
--- a/kubernetes/policy/components/policy-xacml-pdp/values.yaml
+++ b/kubernetes/policy/components/policy-xacml-pdp/values.yaml
@@ -102,6 +102,31 @@ service:
ingress:
enabled: false
+serviceMesh:
+ authorizationPolicy:
+ authorizedPrincipals:
+ - serviceAccount: dcae-datafile-collector-read
+ - serviceAccount: dcae-datalake-admin-ui-read
+ - serviceAccount: dcae-datalake-des-read
+ - serviceAccount: dcae-datalake-feeder-read
+ - serviceAccount: dcae-heartbeat-read
+ - serviceAccount: dcae-hv-ves-collector-read
+ - serviceAccount: dcae-kpi-ms-read
+ - serviceAccount: dcae-pm-mapper-read
+ - serviceAccount: dcae-pmsh-read
+ - serviceAccount: dcae-prh-read
+ - serviceAccount: dcae-restconf-collector-read
+ - serviceAccount: dcae-slice-analysis-ms-read
+ - serviceAccount: dcae-snmptrap-collector-read
+ - serviceAccount: dcae-son-handler-read
+ - serviceAccount: dcae-tcagen2-read
+ - serviceAccount: dcae-ves-collector-read
+ - serviceAccount: dcae-ves-mapper-read
+ - serviceAccount: dcae-ves-openapi-manager-read
+ - serviceAccount: message-router-read
+ - serviceAccount: oof-read
+ - serviceAccount: sdnc-read
+
flavor: small
resources:
small: