Update firewall.yaml

TBD54566975 · Jun 27, 2024 · d371107 · d371107
1 parent ee686c5
commit d371107
Showing 1 changed file with 16 additions and 1 deletion.
diff --git a/backend/helm-charts/templates/firewall.yaml b/backend/helm-charts/templates/firewall.yaml
@@ -10,6 +10,21 @@ spec:
     - source:
         namespaces: ["{{ .Release.Namespace }}"]
 ---
+apiVersion: security.istio.io/v1beta1
+kind: AuthorizationPolicy
+metadata:
+  name: dapreg-oauth
+spec:
+  action: CUSTOM
+  provider:
+    name: "oauth2-proxy"
+  rules:
+  - to:
+    - operation:
+        paths: ["/admin*"]
+        hosts:
+        - "{{ .Values.dns }}"
+---
 # this lets app receive traffic from common ingress gateway 
 apiVersion: security.istio.io/v1beta1
 kind: AuthorizationPolicy
@@ -24,4 +39,4 @@ spec:
         - "{{ .Values.dns }}"
   - from:
     - source:
-        namespaces: [istio-system"]
+        namespaces: [istio-system"]