#124: Fix regression of istio authorization policy label matching on 6.0.3-bb.1
General MR
Summary
When upgrading the chart for minio 6.0.3 we removed the default app: minio
selector on istio authorization policies for bigbang. This resulted in RBAC failures when istio hardening was enabled. Since neither my manual testing or the package pipeline testing enabled istio hardening, we didn't discover this until 6.0.3-bb.1 was approved and hit the bigbang mergeback pipeline.
Relevant logs/screenshots
Passing test with istio hardening enabled
# Values
istio:
enabled: true
# ... snip ....
values:
hardened:
enabled: true
# ... snip ....
addons:
minio:
enabled: true
git:
tag: ""
branch: "6.0.3-bb.1_bugfix_istio_applabels"
values:
istio:
enabled: true
# ... snip ....
Running: 01-minio-login.spec.cy.js (1 of 1)
Minio Login
✓ Check Minio Login (3969ms)
1 passing (7s)
(Results)
┌────────────────────────────────────────────────────────────────────────────────────────────────┐
│ Tests: 1 │
│ Passing: 1 │
│ Failing: 0 │
│ Pending: 0 │
│ Skipped: 0 │
│ Screenshots: 0 │
│ Video: true │
│ Duration: 7 seconds │
│ Spec Ran: 01-minio-login.spec.cy.js │
└────────────────────────────────────────────────────────────────────────────────────────────────┘
(Video)
- Started compressing: Compressing to 35 CRF
- Finished compressing: 3 seconds
- Video output: /test/cypress/videos/01-minio-login.spec.cy.js.mp4
Prior to this change, the cypress test fails with 403 forbidden using the same values.
Linked Issue
Upgrade Notices
N/A