# Allows the SecurityPolicy (in the envoy-gateway namespace) to reference the
# bouncer Service in this (crowdsec) namespace as its ext_authz backend.
apiVersion: gateway.networking.k8s.io/v1beta1
kind: ReferenceGrant
metadata:
  name: crowdsec-ext-auth-from-envoy-gateway
  namespace: crowdsec
spec:
  from:
    - group: gateway.envoyproxy.io
      kind: SecurityPolicy
      namespace: envoy-gateway
  to:
    - group: ""
      kind: Service
      name: crowdsec-envoy-bouncer