From cbf9e62e015c53d8bc079f421a862576014d433e Mon Sep 17 00:00:00 2001 From: AnsuFrancis Date: Fri, 5 Mar 2021 14:16:11 +0000 Subject: [PATCH 1/2] add dkube sa in dfabproxy deployment --- kustomize-nfs/dkube/base/dkube.yaml | 2 ++ kustomize/dkube/base/dkube.yaml | 2 ++ 2 files changed, 4 insertions(+) diff --git a/kustomize-nfs/dkube/base/dkube.yaml b/kustomize-nfs/dkube/base/dkube.yaml index 508f2b24..6d750462 100644 --- a/kustomize-nfs/dkube/base/dkube.yaml +++ b/kustomize-nfs/dkube/base/dkube.yaml @@ -401,6 +401,8 @@ spec: nodeSelector: NODE_SELECTOR restartPolicy: Always schedulerName: default-scheduler + serviceAccount: dkube + serviceAccountName: dkube terminationGracePeriodSeconds: 30 --- apiVersion: apps/v1 diff --git a/kustomize/dkube/base/dkube.yaml b/kustomize/dkube/base/dkube.yaml index 7271b433..10ea5b71 100644 --- a/kustomize/dkube/base/dkube.yaml +++ b/kustomize/dkube/base/dkube.yaml @@ -410,6 +410,8 @@ spec: nodeSelector: NODE_SELECTOR restartPolicy: Always schedulerName: default-scheduler + serviceAccount: dkube + serviceAccountName: dkube terminationGracePeriodSeconds: 30 --- apiVersion: apps/v1 From 09e25436c4ca42d5e3b525fa4298f546ba56aaf4 Mon Sep 17 00:00:00 2001 From: AnsuFrancis Date: Wed, 21 Apr 2021 08:03:06 +0000 Subject: [PATCH 2/2] add Authorization in allowedUpstreamHeaders --- kustomize/service/base/service.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/kustomize/service/base/service.yaml b/kustomize/service/base/service.yaml index f9a4dd78..1580126e 100644 --- a/kustomize/service/base/service.yaml +++ b/kustomize/service/base/service.yaml @@ -537,6 +537,7 @@ spec: - exact: d3-uname - exact: d3-role - exact: x-cluster-id + - exact: Authorization serverUri: cluster: outbound|3001||dkube-auth-server.dkube.svc.cluster.local failureModeAllow: false