...
1apiVersion: policy.linkerd.io/v1beta1
2kind: Server
3metadata:
4 name: cdi-metrics
5 namespace: cdi
6spec:
7 port: metrics
8 podSelector:
9 matchLabels:
10 platform.edge.ncr.com/component: kubevirt-cdi
11 proxyProtocol: HTTP/1
12---
13apiVersion: policy.linkerd.io/v1beta1
14kind: ServerAuthorization
15metadata:
16 name: cdi-metrics
17 namespace: cdi
18spec:
19 client:
20 meshTLS:
21 serviceAccounts:
22 - name: prometheus
23 namespace: prometheus
24 server:
25 name: cdi-metrics
26---
27apiVersion: policy.linkerd.io/v1beta1
28kind: Server
29metadata:
30 name: cdi-health-probe
31 namespace: cdi
32spec:
33 port: 8443
34 podSelector:
35 matchLabels:
36 app.kubernetes.io/managed-by: cdi-operator
37 proxyProtocol: TLS
38---
39apiVersion: policy.linkerd.io/v1beta1
40kind: ServerAuthorization
41metadata:
42 name: cdi-health-probe
43 namespace: cdi
44spec:
45 client:
46 unauthenticated: true
47 server:
48 name: cdi-health-probe
View as plain text