UNCLASSIFIED - NO CUI

Network policies block cluster-auditor (opa-collector pod) access to elasticsearch

When network policies on logging are removed, everything works fine. opa-collector is in the logging namespace, so the inter namespace network policy should work. I'll update the ticket as I find more information.

With the network policies, opa-collector is in a continuous crash loop.

Reproduction:

  • Install Big Bang with OPA Gatekeeper, Istio, ECK Operator, Logging (0.1.14-bb.0), and Cluster-Auditor