From 63748c1b5ab0fc4adf81e1c1db8d1a1c3e8f5923 Mon Sep 17 00:00:00 2001 From: juliusvonkohout <45896133+juliusvonkohout@users.noreply.github.com> Date: Tue, 25 Mar 2025 21:15:07 +0100 Subject: [PATCH] this change should happen after the release Signed-off-by: juliusvonkohout <45896133+juliusvonkohout@users.noreply.github.com> --- .../base/gateway-authorizationpolicy.yaml | 8 +++----- .../base/gateway-authorizationpolicy.yaml | 8 +++----- 2 files changed, 6 insertions(+), 10 deletions(-) diff --git a/common/istio-1-24/cluster-local-gateway/base/gateway-authorizationpolicy.yaml b/common/istio-1-24/cluster-local-gateway/base/gateway-authorizationpolicy.yaml index 42db13d36e..0909f193a5 100644 --- a/common/istio-1-24/cluster-local-gateway/base/gateway-authorizationpolicy.yaml +++ b/common/istio-1-24/cluster-local-gateway/base/gateway-authorizationpolicy.yaml @@ -1,12 +1,10 @@ -# Enforce OAuth2-proxy authentication for cluster-local-gateway +# Allow all traffic to the cluster-local-gateway apiVersion: security.istio.io/v1beta1 kind: AuthorizationPolicy metadata: - name: cluster-local-gateway-oauth2-proxy + name: cluster-local-gateway spec: - action: CUSTOM - provider: - name: oauth2-proxy + action: ALLOW selector: # Same as the cluster-local-gateway Service selector matchLabels: diff --git a/common/istio-cni-1-24/cluster-local-gateway/base/gateway-authorizationpolicy.yaml b/common/istio-cni-1-24/cluster-local-gateway/base/gateway-authorizationpolicy.yaml index 42db13d36e..0909f193a5 100644 --- a/common/istio-cni-1-24/cluster-local-gateway/base/gateway-authorizationpolicy.yaml +++ b/common/istio-cni-1-24/cluster-local-gateway/base/gateway-authorizationpolicy.yaml @@ -1,12 +1,10 @@ -# Enforce OAuth2-proxy authentication for cluster-local-gateway +# Allow all traffic to the cluster-local-gateway apiVersion: security.istio.io/v1beta1 kind: AuthorizationPolicy metadata: - name: cluster-local-gateway-oauth2-proxy + name: cluster-local-gateway spec: - action: CUSTOM - provider: - name: oauth2-proxy + action: ALLOW selector: # Same as the cluster-local-gateway Service selector matchLabels: