Allow plaintext connections to cf-blobstore

cloudfoundry · Mar 12, 2020 · 6c3d602 · 6c3d602
1 parent 294feb4
commit 6c3d602
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/config/kpack.yml b/config/kpack.yml
@@ -3,3 +3,16 @@
 
 #@ kpack = library.get("github.com/pivotal/kpack")
 --- #@ template.replace(kpack.eval())
+--- #! explanation: the blobstore's sidecar needs to accept plain text connections from kpack build init containers.
+    #! see https://github.com/cloudfoundry/capi-k8s-release/issues/12
+apiVersion: "authentication.istio.io/v1alpha1"
+kind: "Policy"
+metadata:
+  name: "cf-blobstore-allow-plaintext"
+  namespace: "cf-blobstore"
+spec:
+  targets:
+  - name: cf-blobstore-minio
+  peers:
+  - mtls:
+      mode: PERMISSIVE