From b855ec455458a02ccb924d367ff5a9132aa7e73e Mon Sep 17 00:00:00 2001
From: "Aliaksandr Ramanovich (EPAM)" <aliaksandr_ramanovich1@epam.com>
Date: Fri, 5 Aug 2022 09:56:25 +0000
Subject: [PATCH] Gonrg 5390 upd istio policy
---
devops/gcp/deploy/templates/authorization-policy.yml | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/devops/gcp/deploy/templates/authorization-policy.yml b/devops/gcp/deploy/templates/authorization-policy.yml
index 559a1e408..3f42a6a86 100644
--- a/devops/gcp/deploy/templates/authorization-policy.yml
+++ b/devops/gcp/deploy/templates/authorization-policy.yml
@@ -68,9 +68,9 @@ spec:
when:
- key: request.auth.claims[iss]
values:
- - "https://keycloak.{{ .Values.conf.domain }}/auth/realms/{{ .Values.auth.realm }}"
- - "http://keycloak.{{ .Values.conf.domain }}/auth/realms/{{ .Values.auth.realm }}"
- - "http://keycloak.{{ .Release.Namespace }}.svc.cluster.local/auth/realms/{{ .Values.auth.realm }}"
+ - "https://keycloak.{{ .Values.conf.domain }}/realms/{{ .Values.auth.realm }}"
+ - "http://keycloak.{{ .Values.conf.domain }}/realms/{{ .Values.auth.realm }}"
+ - "http://keycloak.{{ .Release.Namespace }}.svc.cluster.local/realms/{{ .Values.auth.realm }}"
- key: request.auth.claims[email]
values:
- "integration-tester@service.local"
--
GitLab