diff options
| author |   AndrewLamb <andrew.a.lamb@est.tech> | 2023-04-05 14:45:11 +0100 |
|---|---|---|
| committer |   Andreas Geissler <andreas-geissler@telekom.de> | 2023-04-21 07:24:03 +0000 |
| commit | ab2704a6f5a9ce2031cca03bc610b0e7c02553df (patch) | |
| tree | 244045cf14be9d9b69d64ee4840ecd26571230f2 /kubernetes/so/components/so-request-db-adapter/values.yaml | |
| parent | 9d4d923694a16dfe53adf262091eba61e4a3cb56 (diff) | |
[SO] Create Authorization Policies for SO
- Create Authoriation Policies for SO
- Add in initial authorized serviceaccounts for each sub component service
Issue-ID: OOM-3128
Change-Id: Id18b7bb6cdb180b1173966e797032118b5b20621
Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
Diffstat (limited to 'kubernetes/so/components/so-request-db-adapter/values.yaml')
| -rwxr-xr-x | kubernetes/so/components/so-request-db-adapter/values.yaml | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/kubernetes/so/components/so-request-db-adapter/values.yaml b/kubernetes/so/components/so-request-db-adapter/values.yaml index 5e49316a36..3eb96e1b8f 100755 --- a/kubernetes/so/components/so-request-db-adapter/values.yaml +++ b/kubernetes/so/components/so-request-db-adapter/values.yaml @@ -119,6 +119,17 @@ livenessProbe: failureThreshold: 3 ingress: enabled: false +serviceMesh: + authorizationPolicy: + authorizedPrincipals: + - serviceAccount: robot-read + - serviceAccount: so-admin-cockpit-read + - serviceAccount: so-bpmn-infra-read + - serviceAccount: so-etsi-sol005-adapter-read + - serviceAccount: so-nssmf-adapter-read + - serviceAccount: so-openstack-adapter-read + - serviceAccount: so-read + - serviceAccount: so-sdc-controller-read nodeSelector: {} tolerations: [] affinity: {} |