UNCLASSIFIED - NO CUI

Skip to content

Add Missing Auth Policy and Service Entry

Currently there are 403 (RBAC_ACCESS_DENIED) errors occurring from Kiali to Jaeger indicating there is a missing authorization policy that needs to be added to ensure proper communication.

Additionally, we have a custom authorization policy that is present in our test-values.yaml file in the BB repo which appears to be there so that our pipelines work as expected. There is also a custom service entry present to allow our helm tests to work.

  • Add missing authorization policy for Kiali to Jaeger.
  • Investigate if custom authorization policy in test-values.yaml is required. If it is, add it here by default as end users would also need this.
  • Add a service entry to allow helm tests to complete if bbtests is enabled.
  • Validate no additional authorization policies are required when SSO is enabled.
Edited by Jimmy Bourque