General MR

Summary

Remove Authservice related labels from Tempo template

Relevant logs/screenshots

Prior to template update (with SSO enabled):

kubectl get po -n tempo --show-labels

NAME            READY   STATUS    RESTARTS   AGE     LABELS
tempo-tempo-0   2/2     Running   0          7m36s   app.kubernetes.io/instance=tempo-tempo,app.kubernetes.io/name=tempo,apps.kubernetes.io/pod-index=0,controller-revision-hash=tempo-tempo-79878cbbcd,protect=keycloak,security.istio.io/tlsMode=istio,service.istio.io/canonical-name=tempo-tempo,service.istio.io/canonical-revision=latest,statefulset.kubernetes.io/pod-name=tempo-tempo-0

kubectl logs tempo-tempo-0 -c istio-proxy -n tempo | grep 403

2025-12-22T14:29:27.415403Z	info	ads	ADS: new connection for node:1
[2025-12-22T14:32:40.922Z] "GET /metrics HTTP/2" 403 UAEX ext_authz_error - "-" 0 0 1 - "-" "Prometheus/3.8.0" "afb4c1a2-bc37-44cd-8468-1913920f080f" "10.42.0.18:3200" "-" inbound|3200||; - 10.42.0.18:3200 10.42.2.7:38908 - default traceID=-
[2025-12-22T14:33:10.917Z] "GET /metrics HTTP/2" 403 UAEX ext_authz_error - "-" 0 0 0 - "-" "Prometheus/3.8.0" "b1cfcd91-ed70-4066-9d7b-7b7af895a239" "10.42.0.18:3200" "-" inbound|3200||; - 10.42.0.18:3200 10.42.2.7:38908 - default traceID=-
[2025-12-22T14:33:40.918Z] "GET /metrics HTTP/2" 403 UAEX ext_authz_error - "-" 0 0 0 - "-" "Prometheus/3.8.0" "d1082dca-97f7-4821-8f09-cd78078b1a49" "10.42.0.18:3200" "-" inbound|3200||; - 10.42.0.18:3200 10.42.2.7:38908 - default traceID=-
[2025-12-22T14:34:10.918Z] "GET /metrics HTTP/2" 403 UAEX ext_authz_error - "-" 0 0 0 - "-" "Prometheus/3.8.0" "c3c84e4d-8222-404c-91a1-fb964fe217a5" "10.42.0.18:3200" "-" inbound|3200||; - 10.42.0.18:3200 10.42.2.7:38908 - default traceID=-
[2025-12-22T14:34:40.917Z] "GET /metrics HTTP/2" 403 UAEX ext_authz_error - "-" 0 0 0 - "-" "Prometheus/3.8.0" "137ece68-6736-4eda-8e19-f68118dd8661" "10.42.0.18:3200" "-" inbound|3200||; - 10.42.0.18:3200 10.42.2.7:38908 - default traceID=-
[2025-12-22T14:35:10.918Z] "GET /metrics HTTP/2" 403 UAEX ext_authz_error - "-" 0 0 0 - "-" "Prometheus/3.8.0" "dedf6722-374f-4a52-b1b8-1d34500f1c78" "10.42.0.18:3200" "-" inbound|3200||; - 10.42.0.18:3200 10.42.2.7:38908 - default traceID=-
[2025-12-22T14:35:40.918Z] "GET /metrics HTTP/2" 403 UAEX ext_authz_error - "-" 0 0 0 - "-" "Prometheus/3.8.0" "0f4cad46-b0b5-4d2e-9e80-57028601b134" "10.42.0.18:3200" "-" inbound|3200||; - 10.42.0.18:3200 10.42.2.7:38908 - default traceID=-
[2025-12-22T14:36:10.917Z] "GET /metrics HTTP/2" 403 UAEX ext_authz_error - "-" 0 0 0 - "-" "Prometheus/3.8.0" "8afdbee7-d94c-42ad-b84f-458d68399bc4" "10.42.0.18:3200" "-" inbound|3200||; - 10.42.0.18:3200 10.42.2.7:38908 - default traceID=-
[2025-12-22T14:36:40.918Z] "GET /metrics HTTP/2" 403 UAEX ext_authz_error - "-" 0 0 0 - "-" "Prometheus/3.8.0" "8e8f7506-1f46-429d-893b-95abec9f3961" "10.42.0.18:3200" "-" inbound|3200||; - 10.42.0.18:3200 10.42.2.7:38908 - default traceID=-
[2025-12-22T14:37:10.917Z] "GET /metrics HTTP/2" 403 UAEX ext_authz_error - "-" 0 0 0 - "-" "Prometheus/3.8.0" "cccb38a5-fea7-999d-a13b-3784a5e67555" "10.42.0.18:3200" "-" inbound|3200||; - 10.42.0.18:3200 10.42.2.7:38908 - default traceID=-
...

After template update (with SSO enabled):

kubectl get po -n tempo --show-labels

NAME            READY   STATUS    RESTARTS   AGE     LABELS
tempo-tempo-0   2/2     Running   0          2m59s   app.kubernetes.io/instance=tempo-tempo,app.kubernetes.io/name=tempo,apps.kubernetes.io/pod-index=0,controller-revision-hash=tempo-tempo-5979bc48c6,security.istio.io/tlsMode=istio,service.istio.io/canonical-name=tempo-tempo,service.istio.io/canonical-revision=latest,statefulset.kubernetes.io/pod-name=tempo-tempo-0