Tempo Requires an Istio AuthorizationPolicy in order to Communicate with Prometheus
In Big Bang 2.0, Tempo is configured to send data to a remoteWriteUrl
of "http://prometheus.monitoring:9090/api/v1/write"
When Istio, Tempo and Monitoring are enabled, Tempo gets a 403
HTTP code when attempting to communicate with Prometheus. In the Prometheus istio-proxy sidecar logs, we see messages containing:
"POST /api/v1/write HTTP/1.1" 403 - rbac_access_denied_matched_policy[none]
The issue is a missing AuthorizationPolicy
, similar to those that exists for Kiali.