apiVersion: policy.linkerd.io/v1beta1 kind: Server metadata: name: cdi-metrics namespace: cdi spec: port: metrics podSelector: matchLabels: platform.edge.ncr.com/component: kubevirt-cdi proxyProtocol: HTTP/1 --- apiVersion: policy.linkerd.io/v1beta1 kind: ServerAuthorization metadata: name: cdi-metrics namespace: cdi spec: client: meshTLS: serviceAccounts: - name: prometheus namespace: prometheus server: name: cdi-metrics --- apiVersion: policy.linkerd.io/v1beta1 kind: Server metadata: name: cdi-health-probe namespace: cdi spec: port: 8443 podSelector: matchLabels: app.kubernetes.io/managed-by: cdi-operator proxyProtocol: TLS --- apiVersion: policy.linkerd.io/v1beta1 kind: ServerAuthorization metadata: name: cdi-health-probe namespace: cdi spec: client: unauthenticated: true server: name: cdi-health-probe