# Gateway whose praxis.yaml is written by the Grid operator. The pod waits until the
# operator creates the ConfigMap. The operator's praxis.yaml has no caller authentication,
# so keep the Service ClusterIP and put an authenticating front in front of it.
fullnameOverride: consumer-gateway
praxisConfig:
  source: operator
  operator:
    configMapName: ""
gridIdentity:
  tlsSecretName: consumer-tls
  caSecretName: grid-ca
service:
  type: ClusterIP

# This example allows only pods labeled app: authenticating-front in this namespace.
# Change the selector to match your authenticating front.
networkPolicy:
  enabled: true
  from:
    - podSelector:
        matchLabels:
          app: authenticating-front