From 7ef78aefe4cf6dba1e14add5602f4df55862c9b4 Mon Sep 17 00:00:00 2001
From: AndrewLamb <andrew.a.lamb@est.tech>
Date: Thu, 20 Apr 2023 16:24:13 +0100
Subject: [POLICY][COMMON] Create Authorization Policies for Policy

Policy- Add initial authorized serviceaccounts for each sub component service
Common- Change authorizationpolicy to match on the label app

Issue-ID: OOM-3139
Change-Id: I411877b933d6dfcbdee633f1440d16c9658438e5
Signed-off-by: AndrewLamb <andrew.a.lamb@est.tech>
---
 kubernetes/policy/components/policy-api/values.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'kubernetes/policy/components/policy-api/values.yaml')

diff --git a/kubernetes/policy/components/policy-api/values.yaml b/kubernetes/policy/components/policy-api/values.yaml
index 2ec88ee82e..344994cc08 100755
--- a/kubernetes/policy/components/policy-api/values.yaml
+++ b/kubernetes/policy/components/policy-api/values.yaml
@@ -95,10 +95,14 @@ service:
     - name: http
       port: 6969
 
-
 ingress:
   enabled: false
 
+serviceMesh:
+  authorizationPolicy:
+    authorizedPrincipals:
+      - serviceAccount: policy-pap-read
+
 flavor: small
 resources:
   small:
-- 
cgit 1.2.3-korg