apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: cdi-metrics
  namespace: cdi
spec:
  port: metrics
  podSelector:
    matchLabels:
      platform.edge.ncr.com/component: kubevirt-cdi
  proxyProtocol: HTTP/1
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: cdi-metrics
  namespace: cdi
spec:
  client:
    meshTLS:
      serviceAccounts:
      - name: prometheus
        namespace: prometheus
  server:
    name: cdi-metrics
---
apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: cdi-health-probe
  namespace: cdi
spec:
  port: 8443
  podSelector:
    matchLabels:
      app.kubernetes.io/managed-by: cdi-operator
  proxyProtocol: TLS
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: cdi-health-probe
  namespace: cdi
spec:
  client:
    unauthenticated: true
  server:
    name: cdi-health-probe