diff --git a/pkg/configmap.yaml b/pkg/configmap.yaml index 0985330..9bee5e3 100644 --- a/pkg/configmap.yaml +++ b/pkg/configmap.yaml @@ -8,7 +8,6 @@ data: config: info_service: socket_address: - addr: "0.0.0.0" port: 9901 adapter: envoy: @@ -38,3 +37,5 @@ data: rc_token: rc_token_signing_key: filename: "/etc/ais/certs/rctoken.key" + api_config: + sec_fetch_mode_check: LAX diff --git a/pkg/deployment.yaml b/pkg/deployment.yaml index 2ea4865..4b25687 100644 --- a/pkg/deployment.yaml +++ b/pkg/deployment.yaml @@ -12,10 +12,10 @@ spec: - name: grpc port: 10003 targetPort: 10003 - - name: http + - name: http-jwks port: 10004 targetPort: 10004 - - name: info + - name: http-info port: 9901 targetPort: 9901 --- @@ -38,10 +38,10 @@ spec: spec: containers: - name: authservice - image: gcr.io/gke-release/ais_preview:1.2.6 # kpt-set: ${image} + image: gcr.io/gke-release/asm_user_auth:1.2.7 # kpt-set: ${image} imagePullPolicy: IfNotPresent command: - - /usr/bin/ais_preview + - /usr/bin/asm_user_auth - --uid= - --gid= - --logtostderr @@ -49,10 +49,6 @@ spec: ports: - protocol: TCP containerPort: 10003 - - protocol: TCP - containerPort: 10004 - - protocol: TCP - containerPort: 9901 resources: limits: cpu: "2.0" diff --git a/pkg/ext_authz.yaml b/pkg/ext_authz.yaml index 376d101..cfb5793 100644 --- a/pkg/ext_authz.yaml +++ b/pkg/ext_authz.yaml @@ -14,3 +14,26 @@ spec: - to: - operation: notPaths: ["/ip"] +--- +apiVersion: security.istio.io/v1beta1 +kind: AuthorizationPolicy +metadata: + name: ext-authz-authservice + namespace: asm-user-auth +spec: + selector: + matchLabels: + app: authservice + action: CUSTOM + provider: + name: asm-userauth-grpc + rules: + - to: + - operation: + paths: + - "/_gcp_user_auth/jwks" + - "/metricz" + - "/healthz" + - "/heapz" + - "/mallocz" + - "/peakheapz" \ No newline at end of file