Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-2667

OSSM Trust domain configuration is not working

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • None
    • maistra-2.0.8, maistra-2.1.0
    • None
    • None
    • Sprint 9, Sprint 10

      OSSM Trust domain configuration is not working
      When I tested SMCP trust domain configuration, reference [1], the httpbin app always return 503 after I changed the trust domain to old-td

      [1] https://istio.io/v1.9/docs/tasks/security/authorization/authz-td-migration/

      I deployed httpbin in foo ns and sleep in foo ns, bar ns.
      SMCP spec change : spec.security.trust.domain=old-td

      test script: https://github.com/maistra/maistra-test-tool/blob/maistra-2.1/pkg/tasks/security/authorization/trust_domain.go

      Expected behavior : after trust domain migrates to old-td. sleep in foo ns should curl a httpbin and gets 403. sleep in bar ns should curl a httpbin and gets 200

            jsantana@redhat.com Jonh Wendell
            yuaxu@redhat.com Yuanlin Xu
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: