fix(irc): bind services to waypoint for AuthorizationPolicy enforcement
Best Practices / Kube-score Analysis (push) Has been cancelled
Best Practices / Polaris Audit (push) Has been cancelled
Best Practices / Resource Usage Analysis (push) Has been cancelled
Best Practices / PR Summary Report (push) Has been cancelled
Validate Manifests / YAML Lint (push) Has been cancelled
Validate Manifests / Kustomize Build Test (push) Has been cancelled
Best Practices / Polaris PR Review (push) Has been cancelled
Security Scan / Trivy PR Review (push) Has been cancelled
Security Scan / Checkov IaC Scan (push) Has been cancelled
Security Scan / Checkov PR Review (push) Has been cancelled
Security Scan / Trivy Security Scan (push) Has been cancelled
Validate Manifests / Kubernetes Schema Validation (push) Has been cancelled
Best Practices / Kube-score Analysis (push) Has been cancelled
Best Practices / Polaris Audit (push) Has been cancelled
Best Practices / Resource Usage Analysis (push) Has been cancelled
Best Practices / PR Summary Report (push) Has been cancelled
Validate Manifests / YAML Lint (push) Has been cancelled
Validate Manifests / Kustomize Build Test (push) Has been cancelled
Best Practices / Polaris PR Review (push) Has been cancelled
Security Scan / Trivy PR Review (push) Has been cancelled
Security Scan / Checkov IaC Scan (push) Has been cancelled
Security Scan / Checkov PR Review (push) Has been cancelled
Security Scan / Trivy Security Scan (push) Has been cancelled
Validate Manifests / Kubernetes Schema Validation (push) Has been cancelled
WaypointAccepted: False on both policies — Istio 1.29 requires istio.io/use-waypoint on the Service directly, namespace label alone is insufficient for targetRefs: kind: Service policy binding.
This commit is contained in:
@@ -6,6 +6,7 @@ metadata:
|
||||
name: thelounge
|
||||
labels:
|
||||
app.kubernetes.io/name: thelounge
|
||||
istio.io/use-waypoint: waypoint
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
|
||||
@@ -6,6 +6,7 @@ metadata:
|
||||
name: znc
|
||||
labels:
|
||||
app.kubernetes.io/name: znc
|
||||
istio.io/use-waypoint: waypoint
|
||||
annotations:
|
||||
external-dns.alpha.kubernetes.io/hostname: ${ZNC_HOSTNAME}
|
||||
spec:
|
||||
|
||||
Reference in New Issue
Block a user