UNCLASSIFIED - NO CUI

Tempo Requires an Istio AuthorizationPolicy in order to Communicate with Prometheus

In Big Bang 2.0, Tempo is configured to send data to a remoteWriteUrl of "http://prometheus.monitoring:9090/api/v1/write"

When Istio, Tempo and Monitoring are enabled, Tempo gets a 403 HTTP code when attempting to communicate with Prometheus. In the Prometheus istio-proxy sidecar logs, we see messages containing:

"POST /api/v1/write HTTP/1.1" 403 - rbac_access_denied_matched_policy[none]

The issue is a missing AuthorizationPolicy, similar to those that exists for Kiali.