Erik Brakkee
cd4023f5ce
But... need to do major rework only a single networkauthentication may be set the required authenticationRefs in the authorization policy are anded together so we should use a separate authorization policy for each communication link
15 lines
321 B
YAML
15 lines
321 B
YAML
---
|
|
apiVersion: policy.linkerd.io/v1alpha1
|
|
kind: MeshTLSAuthentication
|
|
metadata:
|
|
name: {{ .app.Name }}-p{{.port}}
|
|
namespace: {{ .app.Namespace.Name }}
|
|
spec:
|
|
identityRefs:
|
|
{{- range $sa := .serviceAccounts }}
|
|
- kind: ServiceAccount
|
|
name: {{ $sa.Name }}
|
|
namespace: {{ $sa.Namespace }}
|
|
{{- end }}
|
|
|