Secure access to KFAM

kubeflow · Aug 5, 2021 · fe0963a · fe0963a
1 parent 9d352d1
commit fe0963a
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/components/centraldashboard/manifests/overlays/istio/authorizationpolicy.yaml b/components/centraldashboard/manifests/overlays/istio/authorizationpolicy.yaml
@@ -0,0 +1,14 @@
+apiVersion: security.istio.io/v1beta1
+kind: AuthorizationPolicy
+metadata:
+  name: central-dashboard
+spec:
+  action: ALLOW
+  rules:
+    - from:
+        - source:
+            principals:
+              - cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account
+  selector:
+    matchLabels:
+      app: centraldashboard