From 0e7c7fe013116e78e9b2bb2725621e528155b26a Mon Sep 17 00:00:00 2001
From: AndrewLamb <andrew.a.lamb@est.tech>
Date: Wed, 17 May 2023 14:13:54 +0100
Subject: [AAI] Create Authorization Policies for AAI

- Create Authorization Policies for AAI
- Add initial authorized serviceAccounts for each sub-component service

Issue-ID: OOM-3126
Change-Id: Ic7fdaf595ae3534805a39859fe8e02b81999bef3
Signed-off-by: amatthews <adrian.matthews@est.tech>
Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
---
 kubernetes/aai/components/aai-graphadmin/values.yaml | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'kubernetes/aai/components/aai-graphadmin/values.yaml')

diff --git a/kubernetes/aai/components/aai-graphadmin/values.yaml b/kubernetes/aai/components/aai-graphadmin/values.yaml
index 3e3d685ad8..253a11c5c8 100644
--- a/kubernetes/aai/components/aai-graphadmin/values.yaml
+++ b/kubernetes/aai/components/aai-graphadmin/values.yaml
@@ -202,6 +202,11 @@ service:
 ingress:
   enabled: false
 
+# No inbound communications.
+serviceMesh:
+  authorizationPolicy:
+    authorizedPrincipals: []
+
 persistence:
   enabled: true
   ## A manually managed Persistent Volume and Claim
-- 
cgit 1.2.3-korg