apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: spegel-healthz
  namespace: spegel
spec:
  port: 5000
  podSelector:
    matchLabels:
      app.kubernetes.io/name: spegel
  proxyProtocol: opaque
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: spegel-healthz
  namespace: spegel
spec:
  client:
    unauthenticated: true
  server:
    name: spegel-healthz
---
apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: spegel-router
  namespace: spegel
spec:
  port: 5001
  podSelector:
    matchLabels:
      app.kubernetes.io/name: spegel
  proxyProtocol: opaque
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: spegel-router
  namespace: spegel
spec:
  client:
    unauthenticated: true
  server:
    name: spegel-router
---
apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: spegel-metrics
  namespace: spegel
spec:
  port: 9090
  podSelector:
    matchLabels:
      app.kubernetes.io/name: spegel
  proxyProtocol: opaque
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: spegel-metrics
  namespace: spegel
spec:
  client:
    meshTLS:
      serviceAccounts:
      - name: prometheus
        namespace: prometheus
      - name: spegel
        namespace: spegel
  server:
    name: spegel-metrics