...
1apiVersion: policy.linkerd.io/v1beta1
2kind: Server
3metadata:
4 name: spegel-healthz
5 namespace: spegel
6spec:
7 port: 5000
8 podSelector:
9 matchLabels:
10 app.kubernetes.io/name: spegel
11 proxyProtocol: opaque
12---
13apiVersion: policy.linkerd.io/v1beta1
14kind: ServerAuthorization
15metadata:
16 name: spegel-healthz
17 namespace: spegel
18spec:
19 client:
20 unauthenticated: true
21 server:
22 name: spegel-healthz
23---
24apiVersion: policy.linkerd.io/v1beta1
25kind: Server
26metadata:
27 name: spegel-router
28 namespace: spegel
29spec:
30 port: 5001
31 podSelector:
32 matchLabels:
33 app.kubernetes.io/name: spegel
34 proxyProtocol: opaque
35---
36apiVersion: policy.linkerd.io/v1beta1
37kind: ServerAuthorization
38metadata:
39 name: spegel-router
40 namespace: spegel
41spec:
42 client:
43 unauthenticated: true
44 server:
45 name: spegel-router
46---
47apiVersion: policy.linkerd.io/v1beta1
48kind: Server
49metadata:
50 name: spegel-metrics
51 namespace: spegel
52spec:
53 port: 9090
54 podSelector:
55 matchLabels:
56 app.kubernetes.io/name: spegel
57 proxyProtocol: opaque
58---
59apiVersion: policy.linkerd.io/v1beta1
60kind: ServerAuthorization
61metadata:
62 name: spegel-metrics
63 namespace: spegel
64spec:
65 client:
66 meshTLS:
67 serviceAccounts:
68 - name: prometheus
69 namespace: prometheus
70 - name: spegel
71 namespace: spegel
72 server:
73 name: spegel-metrics
View as plain text