1apiVersion: policy.linkerd.io/v1beta1
2kind: Server
3metadata:
4 name: nfd-healthz
5 namespace: nfd
6spec:
7 port: 8082
8 podSelector:
9 matchExpressions:
10 - {key: app, operator: In, values: ["nfd-master", "nfd-worker"]}
11 matchLabels:
12 platform.edge.ncr.com/component: node-feature-discovery
13 proxyProtocol: gRPC
14---
15apiVersion: policy.linkerd.io/v1beta1
16kind: ServerAuthorization
17metadata:
18 name: nfd-healthz-auth
19 namespace: nfd
20spec:
21 client:
22 unauthenticated: true
23 server:
24 name: nfd-healthz
25---
26apiVersion: policy.linkerd.io/v1beta1
27kind: Server
28metadata:
29 name: nfd-metrics
30 namespace: nfd
31spec:
32 port: metrics
33 podSelector:
34 matchLabels:
35 platform.edge.ncr.com/component: node-feature-discovery
36 proxyProtocol: HTTP/1
37---
38apiVersion: policy.linkerd.io/v1beta1
39kind: ServerAuthorization
40metadata:
41 name: nfd-metrics-auth
42 namespace: nfd
43spec:
44 client:
45 meshTLS:
46 serviceAccounts:
47 - name: prometheus
48 namespace: prometheus
49 server:
50 name: nfd-metrics
View as plain text