install/msb-rbac.yaml

   1 apiVersion: "rbac.istio.io/v1alpha1"
   2 kind: ServiceRole
   3 metadata:
   4   name: msb
   5   namespace: onap
   6 spec:
   7   rules:
   8   - services: ["*"]
   9     methods: ["GET"]
  10 ---
  11 apiVersion: "rbac.istio.io/v1alpha1"
  12 kind: ServiceRoleBinding
  13 metadata:
  14   name: bind-service-msb
  15   namespace: onap
  16 spec:
  17   subjects:
  18   - user: "cluster.local/ns/onap/sa/msb"
  19   roleRef:
  20     kind: ServiceRole
  21     name: "msb"