apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: tolerator-webhook-server
  namespace: tolerator
spec:
  port: 8443
  podSelector:
    matchLabels:
      app: tolerator
  proxyProtocol: opaque
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: tolerator-webhook-server-auth
  namespace: tolerator
spec:
  client:
    unauthenticated: true
  server:
    name: tolerator-webhook-server