diff --git a/images/ossm-adding-project-using-label-selector.png b/images/ossm-adding-project-using-label-selector.png new file mode 100644 index 0000000000..566c4f9ae8 Binary files /dev/null and b/images/ossm-adding-project-using-label-selector.png differ diff --git a/images/ossm-adding-project-using-smm.png b/images/ossm-adding-project-using-smm.png new file mode 100644 index 0000000000..f0e0173312 Binary files /dev/null and b/images/ossm-adding-project-using-smm.png differ diff --git a/images/ossm-adding-project-using-smmr.png b/images/ossm-adding-project-using-smmr.png new file mode 100644 index 0000000000..82b7189bf8 Binary files /dev/null and b/images/ossm-adding-project-using-smmr.png differ diff --git a/modules/ossm-about-adding-projects-using-label-selectors.adoc b/modules/ossm-about-adding-projects-using-label-selectors.adoc index 53762cbc11..7b0846c579 100644 --- a/modules/ossm-about-adding-projects-using-label-selectors.adoc +++ b/modules/ossm-about-adding-projects-using-label-selectors.adoc @@ -6,7 +6,11 @@ [id="ossm-about-adding-projects-using-label-selectors_{context}"] = About adding projects using label selectors -For cluster-wide deployments, you can use label selectors to add projects to the mesh. Label selectors specified in the `ServiceMeshMemberRoll` resource enable the {SMProductShortName} operator to add or remove namespaces to or from the mesh based on namespace labels. Unlike other standard {product-title} resources that you can use to specify a single label selector, you can use the `ServiceMeshMemberRoll` resource to specify multiple label selectors. If the labels for a namespace match any of the selectors specified in the `ServiceMeshMemberRoll` resource, then the namespace is included in the mesh. +For cluster-wide deployments, you can use label selectors to add projects to the mesh. Label selectors specified in the `ServiceMeshMemberRoll` resource enable the {SMProductShortName} Operator to add or remove namespaces to or from the mesh based on namespace labels. Unlike other standard {product-title} resources that you can use to specify a single label selector, you can use the `ServiceMeshMemberRoll` resource to specify multiple label selectors. + +image::ossm-adding-project-using-label-selector.png[Adding project using label selector image] + +If the labels for a namespace match any of the selectors specified in the `ServiceMeshMemberRoll` resource, then the namespace is included in the mesh. [NOTE] ==== diff --git a/modules/ossm-about-adding-projects-using-smm.adoc b/modules/ossm-about-adding-projects-using-smm.adoc index 73f768d6bc..436f400de2 100644 --- a/modules/ossm-about-adding-projects-using-smm.adoc +++ b/modules/ossm-about-adding-projects-using-smm.adoc @@ -7,4 +7,6 @@ A `ServiceMeshMember` resource provides a way to add a project to a service mesh without modifying the `ServiceMeshMemberRoll` resource. To add a project, create a `ServiceMeshMember` resource in the project that you want to add to the service mesh. When the {SMProductShortName} Operator processes the `ServiceMeshMember` object, the project appears in the `status.members` list of the `ServiceMeshMemberRoll` resource. Then, the services that reside in the project are made available to the mesh. +image::ossm-adding-project-using-smm.png[Adding project using `ServiceMeshMember` resource image] + The mesh administrator must grant each mesh user permission to reference the `ServiceMeshControlPlane` resource in the `ServiceMeshMember` resource. With this permission in place, a mesh user can add a project to a mesh even when that user does not have direct access rights for the service mesh project or the `ServiceMeshMemberRoll` resource. For more information, see Creating the {SMProductName} members. \ No newline at end of file diff --git a/modules/ossm-about-adding-projects-using-smmr.adoc b/modules/ossm-about-adding-projects-using-smmr.adoc index 655b09524d..3d318660df 100644 --- a/modules/ossm-about-adding-projects-using-smmr.adoc +++ b/modules/ossm-about-adding-projects-using-smmr.adoc @@ -7,6 +7,8 @@ Using the `ServiceMeshMemberRoll` resource is the simplest way to add a project to a service mesh. To add a project, specify the project name in the `spec.members` field of the `ServiceMeshMemberRoll` resource. The `ServiceMeshMemberRoll` resource specifies which projects are controlled by the `ServiceMeshControlPlane` resource. +image::ossm-adding-project-using-smmr.png[Adding project using `ServiceMeshMemberRoll` resource image] + [NOTE] ==== Adding projects using this method requires the user to have the `update servicemeshmemberrolls` and the `update pods` privileges in the project that is being added.