1apiVersion: policy.linkerd.io/v1beta1
2kind: Server
3metadata:
4 name: fluentbit-metrics
5spec:
6 port: metrics
7 podSelector:
8 # being specific in what pods you are selecting when possible avoids
9 # potential headaches caused by overlapping Server objects
10 matchLabels:
11 app.kubernetes.io/component: logs
12 # Configures protocol discovery for inbound connections.
13 # Must be one of `unknown`, `HTTP/1`,`HTTP/2`,`gRPC`,`opaque`,`TLS`. Defaults to `unknown` if not set.
14 proxyProtocol: HTTP/1
15---
16apiVersion: policy.linkerd.io/v1beta1
17kind: ServerAuthorization
18metadata:
19 name: fluentbit-metrics-auth
20spec:
21 client:
22 meshTLS:
23 serviceAccounts:
24 - name: prometheus
25 namespace: prometheus
26 server:
27 name: fluentbit-metrics
28---
29apiVersion: policy.linkerd.io/v1beta1
30kind: Server
31metadata:
32 name: fluent-operator-server
33spec:
34 port: metrics
35 podSelector:
36 # being specific in what pods you are selecting when possible avoids
37 # potential headaches caused by overlapping Server objects
38 matchLabels:
39 app.kubernetes.io/name: fluent-operator
40 # Configures protocol discovery for inbound connections.
41 # Must be one of `unknown`, `HTTP/1`,`HTTP/2`,`gRPC`,`opaque`,`TLS`. Defaults to `unknown` if not set.
42 proxyProtocol: HTTP/1
43---
44apiVersion: policy.linkerd.io/v1beta1
45kind: ServerAuthorization
46metadata:
47 name: fluent-operator-server-auth
48spec:
49 client:
50 meshTLS:
51 serviceAccounts:
52 - name: prometheus
53 namespace: prometheus
54 server:
55 name: fluent-operator-server
View as plain text