apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: wireguard-vnc-server
  namespace: vpn
  labels:
    platform.edge.ncr.com/component: wireguard-store
spec:
  port: 80
  podSelector:
    matchLabels:
      platform.edge.ncr.com/component: wireguard-store
  proxyProtocol: opaque
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: wireguard-vnc-auth
  namespace: vpn
  labels:
    platform.edge.ncr.com/component: wireguard-store
spec:
  client:
    meshTLS:
      serviceAccounts:
      - name: wireguard-vnc
        namespace: vpn
  server:
    name: wireguard-vnc-server