apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: fluentbit-metrics
spec:
  port: metrics
  podSelector:
    # being specific in what pods you are selecting when possible avoids
    # potential headaches caused by overlapping Server objects
    matchLabels:
      app.kubernetes.io/component: logs
  # Configures protocol discovery for inbound connections.
  # Must be one of `unknown`, `HTTP/1`,`HTTP/2`,`gRPC`,`opaque`,`TLS`. Defaults to `unknown` if not set.
  proxyProtocol: HTTP/1
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: fluentbit-metrics-auth
spec:
  client:
    meshTLS:
      serviceAccounts:
      - name: prometheus
        namespace: prometheus
  server:
    name: fluentbit-metrics
---
apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: fluent-operator-server
spec:
  port: metrics
  podSelector:
    # being specific in what pods you are selecting when possible avoids
    # potential headaches caused by overlapping Server objects
    matchLabels:
      app.kubernetes.io/name: fluent-operator
  # Configures protocol discovery for inbound connections.
  # Must be one of `unknown`, `HTTP/1`,`HTTP/2`,`gRPC`,`opaque`,`TLS`. Defaults to `unknown` if not set.
  proxyProtocol: HTTP/1
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: fluent-operator-server-auth
spec:
  client:
    meshTLS:
      serviceAccounts:
      - name: prometheus
        namespace: prometheus
  server:
    name: fluent-operator-server