kube/testapp/istio/srv-role.yaml
2019-08-07 00:42:25 +02:00

31 lines
598 B
YAML

apiVersion: rbac.istio.io/v1alpha1
kind: ServiceRole
metadata:
name: testapp-srv
namespace: default
spec:
rules:
- services: ["testapp-srv.default.svc.cluster.local"]
---
apiVersion: rbac.istio.io/v1alpha1
kind: ServiceRoleBinding
metadata:
name: testapp-srv
namespace: default
spec:
subjects:
- user: "*"
roleRef:
kind: ServiceRole
name: testapp-srv
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: testapp-srv
namespace: default
spec:
host: testapp-srv.default.svc.cluster.local
trafficPolicy:
tls:
mode: ISTIO_MUTUAL