UNCLASSIFIED - NO CUI

Fix authservice wiring in istiod when enabled via monitoring/tempo/thanos SSO

General MR

Summary

The fix ensures that whenever authservice is deployed (via monitoring+sso, tempo+sso, thanos+sso, or explicit authservice.enabled), istio is also properly configured with the authservice extensionProvider.

Fix authservice wiring in istiod when enabled via monitoring/tempo/thanos SSO

  Aligns istiod extensionProviders condition with authservice installation condition to prevent RBAC access denied errors.

Relevant logs/screenshots

monitoring:
  enabled: true
  sso:
    enabled: true
grafana:
  enabled: true
  sso:
    enabled: true

addons:
  authservice:
    enabled: false

Before Fix:

image

After Fix:

image

Linked Issue

issue

Upgrade Notices

N/A

Edited by Dustin Hilgaertner

Merge request reports

Loading