1apiVersion: policy.linkerd.io/v1beta1
2kind: Server
3metadata:
4 name: metrics
5spec:
6 port: metrics
7 podSelector:
8 # being specific in what pods you are selecting when possible avoids
9 # potential headaches caused by overlapping Server objects
10 matchLabels:
11 platform.edge.ncr.com/component: interlock
12 # Configures protocol discovery for inbound connections.
13 # Must be one of `unknown`, `HTTP/1`,`HTTP/2`,`gRPC`,`opaque`,`TLS`. Defaults to `unknown` if not set.
14 proxyProtocol: HTTP/1
15---
16apiVersion: policy.linkerd.io/v1beta1
17kind: ServerAuthorization
18metadata:
19 name: metrics
20spec:
21 client:
22 meshTLS:
23 serviceAccounts:
24 - name: prometheus
25 namespace: prometheus
26 server:
27 # SERVER_NAME will be substituted by kustomize
28 name: SERVER_NAME
29---
30apiVersion: policy.linkerd.io/v1beta1
31kind: Server
32metadata:
33 name: interlock
34spec:
35 port: interlock-api
36 podSelector:
37 # being specific in what pods you are selecting when possible avoids
38 # potential headaches caused by overlapping Server objects
39 matchLabels:
40 platform.edge.ncr.com/component: interlock
41 # Configures protocol discovery for inbound connections.
42 # Must be one of `unknown`, `HTTP/1`,`HTTP/2`,`gRPC`,`opaque`,`TLS`. Defaults to `unknown` if not set.
43 proxyProtocol: HTTP/1
44---
45apiVersion: policy.linkerd.io/v1beta1
46kind: ServerAuthorization
47metadata:
48 name: interlock
49spec:
50 client:
51 unauthenticated: true
52 server:
53 # SERVER_NAME will be substituted by kustomize
54 name: SERVER_NAME
View as plain text