Basic question I create a server but it's not restricting traffic

Linkerd General Discussion
1

Hi I am trying to block traffic to my service by creating a server. I have created a server like so

kubectl apply -f - <<EOF
---
apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  namespace: ma-int
  name: resolve-grpc
  labels:
    name: resolve
spec:
  podSelector:
    matchLabels:
      name: resolve
  port: grpc
  proxyProtocol: gRPC
EOF

however all traffic is still going through. I am just trying to set up a security test so after this create a ServerAuthroization but no need for that since it’s no blocking any traffic. Any ideas what I am doing wrong or how I can debug this?

Oh one more thing everything was installed recently everything is default.

One more thing when I run this command
kubectl get pods -l name=resolve
it returns my pod

when I run this command
linkerd viz authz -n ma-int deploy/resolve
I don’t see anything other then defult.

2

Just to confirm, are the resolve pods meshed?

3

they are meshed I put the linker annotation ( linkerd.io/inject: enabled) in the deployment.yml they show as meshed in the dashboard. I am not sure what it could be

4

One other thing to check. Is the grpc port you listed in the Server also listed in the base pod spec? For complicated reasons the Server only considers ports in the pod spec.

5

thank you that worked.