#95 Authorization done

airavata-courses · May 4, 2020 · 6de0595 · 6de0595
1 parent 9a88088
commit 6de0595
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 0 deletions.
diff --git a/Istio authentication and authorization/auth-policy.yaml b/Istio authentication and authorization/auth-policy.yaml
@@ -0,0 +1,13 @@
+apiVersion: authentication.istio.io/v1alpha1
+kind: Policy
+metadata:
+  name: auth-policy
+spec:
+  targets:
+  - name: ui
+  - name: um-api
+  origins:
+  - jwt:
+      issuer: "https://kdb454.auth0.com/"
+      jwksUri: "https://kdb454.auth0.com/.well-known/jwks.json"
+  principalBinding: USE_ORIGIN
diff --git a/Istio authentication and authorization/tls-stric.yaml b/Istio authentication and authorization/tls-stric.yaml
@@ -0,0 +1,8 @@
+apiVersion: "security.istio.io/v1beta1"
+kind: "PeerAuthentication"
+metadata:
+  name: "default"
+  namespace: "istio-system"
+spec:
+  mtls:
+    mode: PERMISSIVE