Merge pull request #2464 from openziti/quick-k8s-explicit-policy-sema…

…ntic use explicit policy semantic and all/all SERP in k8s demo
openziti · Oct 2, 2024 · 7849e06 · 7849e06
2 parents 0eec47c + 924680d
commit 7849e06
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/quickstart/kubernetes/miniziti.bash b/quickstart/kubernetes/miniziti.bash
@@ -1066,7 +1066,7 @@ EOF
     if  ! zitiWrapper edge list service-policies 'name="httpbin-bind-policy"' --csv \
         | grep -q "httpbin-bind-policy"; then
         logDebug "creating service-policy httpbin-bind-policy"
-        zitiWrapper edge create service-policy "httpbin-bind-policy" Bind \
+        zitiWrapper edge create service-policy "httpbin-bind-policy" Bind --semantic "AnyOf" \
             --service-roles '@httpbin-service' --identity-roles '#httpbin-hosts' >&3
     else
         logDebug "ignoring service-policy httpbin-bind-policy"
@@ -1075,7 +1075,7 @@ EOF
     if  ! zitiWrapper edge list service-policies 'name="httpbin-dial-policy"' --csv \
         | grep -q "httpbin-dial-policy"; then
         logDebug "creating service-policy httpbin-dial-policy"
-        zitiWrapper edge create service-policy "httpbin-dial-policy" Dial \
+        zitiWrapper edge create service-policy "httpbin-dial-policy" Dial --semantic "AnyOf" \
             --service-roles '@httpbin-service' --identity-roles '#httpbin-clients' >&3
     else
         logDebug "ignoring service-policy httpbin-dial-policy"
@@ -1094,7 +1094,7 @@ EOF
         | grep -q "public-routers"; then
         logDebug "creating service-edge-router-policy public-routers"
         zitiWrapper edge create service-edge-router-policy "public-routers" \
-            --edge-router-roles '#public-routers' --service-roles '#all' >&3
+            --edge-router-roles '#all' --service-roles '#all' >&3
     else
         logDebug "ignoring service-edge-router-policy public-routers"
     fi