farhoodliquor/irc
Archived
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(irc): bind services to waypoint for AuthorizationPolicy enforcement
Best Practices / Kube-score Analysis (push) Has been cancelled
Details
Best Practices / Polaris Audit (push) Has been cancelled
Details
Best Practices / Resource Usage Analysis (push) Has been cancelled
Details
Best Practices / PR Summary Report (push) Has been cancelled
Details
Validate Manifests / YAML Lint (push) Has been cancelled
Details
Validate Manifests / Kustomize Build Test (push) Has been cancelled
Details
Best Practices / Polaris PR Review (push) Has been cancelled
Details
Security Scan / Trivy PR Review (push) Has been cancelled
Details
Security Scan / Checkov IaC Scan (push) Has been cancelled
Details
Security Scan / Checkov PR Review (push) Has been cancelled
Details
Security Scan / Trivy Security Scan (push) Has been cancelled
Details
Validate Manifests / Kubernetes Schema Validation (push) Has been cancelled
Details

Browse Source 
WaypointAccepted: False on both policies — Istio 1.29 requires
istio.io/use-waypoint on the Service directly, namespace label alone
is insufficient for targetRefs: kind: Service policy binding.
This commit is contained in:
Chris Farhood
2026-05-15 22:46:21 -04:00
parent 605002f58a
commit 0614d6b91a
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
thelounge/service.yaml
+1
View File
@@ -6,6 +6,7 @@ metadata:
name: thelounge name: thelounge
labels: labels:
app.kubernetes.io/name: thelounge app.kubernetes.io/name: thelounge
istio.io/use-waypoint: waypoint
spec: spec:
type: ClusterIP type: ClusterIP
ports: ports:
znc/service.yaml
+1
View File
@@ -6,6 +6,7 @@ metadata:
name: znc name: znc
labels: labels:
app.kubernetes.io/name: znc app.kubernetes.io/name: znc
istio.io/use-waypoint: waypoint
annotations: annotations:
external-dns.alpha.kubernetes.io/hostname: ${ZNC_HOSTNAME} external-dns.alpha.kubernetes.io/hostname: ${ZNC_HOSTNAME}
spec: spec: