access rules

navikt · Feb 19, 2024 · 2583677 · 2583677
1 parent d02a0ab
commit 2583677
Show file tree

Hide file tree

Showing 4 changed files with 33 additions and 0 deletions.
diff --git a/.nais/nais.yaml b/.nais/nais.yaml
@@ -57,6 +57,21 @@ spec:
       autoLogin: true
       autoLoginIgnorePaths:
         - /api/**
+  accessPolicy:
+    inbound:
+      rules:
+        - application: {{ application.eux-neessi.name }}
+          namespace: {{ application.eux-neessi.namespace }}
+          cluster: {{ cluster.gcp }}
+        - application: {{ application.eux-fagmodul-journalfoering.name }}
+          namespace: {{ application.eux-fagmodul-journalfoering.namespace }}
+          cluster: {{ cluster.fss }}
+    outbound:
+      external:
+        - host: {{ application.saf.host }}
+        - host: {{ application.dokarkiv.host }}
+      rules:
+        - application: {{ application.eux-oppgave.name }}
   env:
     - name: CLIENT_EUXNAVRINASAK_ENDPOINT
       value: {{ client.euxnavrinasak.endpoint }}

diff --git a/.nais/prod.yaml b/.nais/prod.yaml
@@ -14,6 +14,10 @@ application:
     name: eux-fagmodul-journalfoering
     namespace: eessibasis
 
+  eux-oppgave:
+    name: eux-oppgave
+    namespace: eessibasis
+
 client:
   euxnavrinasak:
     url: http://eux-nav-rinasak
@@ -24,10 +28,12 @@ client:
     scope: api://dev-gcp.eessibasis.eux-oppgave/.default
 
   saf:
+    host: saf.prod-fss-pub.nais.io
     url: https://saf.prod-fss-pub.nais.io
     scope: api://prod-fss.teamdokumenthandtering.saf/.default
 
   dokarkiv:
+    host: dokarkiv.prod-fss-pub.nais.io
     url: https://dokarkiv.prod-fss-pub.nais.io
     scope: api://prod-fss.teamdokumenthandtering.dokarkiv/.default
 

diff --git a/.nais/q1.yaml b/.nais/q1.yaml
@@ -14,6 +14,10 @@ application:
     name: eux-fagmodul-journalfoering-q1
     namespace: eessibasis
 
+  eux-oppgave:
+    name: eux-oppgave-q1
+    namespace: eessibasis
+
 client:
   euxnavrinasak:
     endpoint: http://eux-nav-rinasak-q1
@@ -24,10 +28,12 @@ client:
     scope: api://dev-gcp.eessibasis.eux-oppgave-q1/.default
 
   saf:
+    host: saf.dev-fss-pub.nais.io
     url: https://saf.dev-fss-pub.nais.io
     scope: api://dev-fss.teamdokumenthandtering.saf-q1/.default
 
   dokarkiv:
+    host: dokarkiv-q1.dev-fss-pub.nais.io
     url: https://dokarkiv-q1.dev-fss-pub.nais.io
     scope: api://dev-fss.teamdokumenthandtering.dokarkiv/.default
 

diff --git a/.nais/q2.yaml b/.nais/q2.yaml
@@ -14,6 +14,10 @@ application:
     name: eux-fagmodul-journalfoering-q2
     namespace: eessibasis
 
+  eux-oppgave:
+    name: eux-oppgave-q2
+    namespace: eessibasis
+
 client:
   euxnavrinasak:
     endpoint: http://eux-nav-rinasak-q2
@@ -24,10 +28,12 @@ client:
     scope: api://dev-gcp.eessibasis.eux-oppgave-q2/.default
 
   saf:
+    host: saf-q2.dev-fss-pub.nais.io
     url: https://saf-q2.dev-fss-pub.nais.io
     scope: api://dev-fss.teamdokumenthandtering.saf/.default
 
   dokarkiv:
+    host: dokarkiv-q2.dev-fss-pub.nais.io
     url: https://dokarkiv-q2.dev-fss-pub.nais.io
     scope: api://dev-fss.teamdokumenthandtering.dokarkiv/.default