#124: Fix regression of istio authorization policy label matching on 6.0.3-bb.1

General MR

Summary

When upgrading the chart for minio 6.0.3 we removed the default app: minio selector on istio authorization policies for bigbang. This resulted in RBAC failures when istio hardening was enabled. Since neither my manual testing or the package pipeline testing enabled istio hardening, we didn't discover this until 6.0.3-bb.1 was approved and hit the bigbang mergeback pipeline.

Relevant logs/screenshots

Passing test with istio hardening enabled

# Values
istio:
  enabled: true
  # ... snip ....
  values:
    hardened:
      enabled: true
# ... snip ....
addons:
  minio:
    enabled: true
    git:
      tag: ""
      branch: "6.0.3-bb.1_bugfix_istio_applabels"    
    values:
      istio:
        enabled: true
# ... snip ....

  Running:  01-minio-login.spec.cy.js                                                       (1 of 1)


  Minio Login
    ✓ Check Minio Login (3969ms)


  1 passing (7s)


  (Results)

  ┌────────────────────────────────────────────────────────────────────────────────────────────────┐
  │ Tests:        1                                                                                │
  │ Passing:      1                                                                                │
  │ Failing:      0                                                                                │
  │ Pending:      0                                                                                │
  │ Skipped:      0                                                                                │
  │ Screenshots:  0                                                                                │
  │ Video:        true                                                                             │
  │ Duration:     7 seconds                                                                        │
  │ Spec Ran:     01-minio-login.spec.cy.js                                                        │
  └────────────────────────────────────────────────────────────────────────────────────────────────┘


  (Video)

  -  Started compressing: Compressing to 35 CRF
  -  Finished compressing: 3 seconds

  -  Video output: /test/cypress/videos/01-minio-login.spec.cy.js.mp4

Prior to this change, the cypress test fails with 403 forbidden using the same values.

Linked Issue

#124 (closed)

Upgrade Notices

N/A