From 0e7c7fe013116e78e9b2bb2725621e528155b26a Mon Sep 17 00:00:00 2001
From: AndrewLamb <andrew.a.lamb@est.tech>
Date: Wed, 17 May 2023 14:13:54 +0100
Subject: [AAI] Create Authorization Policies for AAI

- Create Authorization Policies for AAI
- Add initial authorized serviceAccounts for each sub-component service

Issue-ID: OOM-3126
Change-Id: Ic7fdaf595ae3534805a39859fe8e02b81999bef3
Signed-off-by: amatthews <adrian.matthews@est.tech>
Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
---
 kubernetes/aai/components/aai-sparky-be/values.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'kubernetes/aai/components/aai-sparky-be/values.yaml')

diff --git a/kubernetes/aai/components/aai-sparky-be/values.yaml b/kubernetes/aai/components/aai-sparky-be/values.yaml
index 8ec45536b8..7fe0a62ace 100644
--- a/kubernetes/aai/components/aai-sparky-be/values.yaml
+++ b/kubernetes/aai/components/aai-sparky-be/values.yaml
@@ -95,6 +95,12 @@ ingress:
   config:
     ssl: "redirect"
 
+serviceMesh:
+  authorizationPolicy:
+    authorizedPrincipals:
+      - serviceAccount: istio-ingress
+        namespace: istio-ingress
+
 podAnnotations:
   sidecar.istio.io/rewriteAppHTTPProbers: "false"
 
-- 
cgit 1.2.3-korg