diff options
| author |   AndrewLamb <andrew.a.lamb@est.tech> | 2023-04-05 14:45:11 +0100 |
|---|---|---|
| committer |   Andreas Geissler <andreas-geissler@telekom.de> | 2023-04-21 07:24:03 +0000 |
| commit | ab2704a6f5a9ce2031cca03bc610b0e7c02553df (patch) | |
| tree | 244045cf14be9d9b69d64ee4840ecd26571230f2 /kubernetes/so/components/so-admin-cockpit/values.yaml | |
| parent | 9d4d923694a16dfe53adf262091eba61e4a3cb56 (diff) | |
[SO] Create Authorization Policies for SO
- Create Authoriation Policies for SO
- Add in initial authorized serviceaccounts for each sub component service
Issue-ID: OOM-3128
Change-Id: Id18b7bb6cdb180b1173966e797032118b5b20621
Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
Diffstat (limited to 'kubernetes/so/components/so-admin-cockpit/values.yaml')
| -rw-r--r-- | kubernetes/so/components/so-admin-cockpit/values.yaml | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/kubernetes/so/components/so-admin-cockpit/values.yaml b/kubernetes/so/components/so-admin-cockpit/values.yaml index a825e16d49..de6f031435 100644 --- a/kubernetes/so/components/so-admin-cockpit/values.yaml +++ b/kubernetes/so/components/so-admin-cockpit/values.yaml @@ -143,6 +143,13 @@ ingress: port: 9091 config: ssl: "none" +serviceMesh: + authorizationPolicy: + authorizedPrincipals: + - serviceAccount: portal-app-read + - serviceAccount: so-read + - serviceAccount: istio-ingress + namespace: istio-ingress nodeSelector: {} tolerations: [] affinity: {} |