Chapter 5. Installing the policy system
Installing the Skupper policy system on a cluster allows you control how Skupper is used on the cluster.
Note
Applying the policy system in a cluster without specific policy rules prohibits site linking and service exposure. If you are installing the policy system on a cluster where there are existing sites, you must create policies before installing the policy system to avoid disruption.
Prerequisites
-
Access to a Kubernetes cluster with
cluster-adminprivileges. - The Red Hat Service Interconnect Operator is installed
Procedure
- Log into your cluster.
Deploy the policy CRD:
$ kubectl apply -f skupper_cluster_policy_crd.yaml customresourcedefinition.apiextensions.k8s.io/skupperclusterpolicies.skupper.io created clusterrole.rbac.authorization.k8s.io/skupper-service-controller created
where the contents of
skupper_cluster_policy_crd.yamlis specified in the Appendix A, YAML for the Skupper policy CRD appendix.
Additional information
See Securing a service network using policies for more information about using policies.
