Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-2667

OSSM Trust domain configuration is not working

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • None
    • maistra-2.0.8, maistra-2.1.0
    • None
    • None
    • Sprint 9, Sprint 10

      OSSM Trust domain configuration is not working
      When I tested SMCP trust domain configuration, reference [1], the httpbin app always return 503 after I changed the trust domain to old-td

      [1] https://istio.io/v1.9/docs/tasks/security/authorization/authz-td-migration/

      I deployed httpbin in foo ns and sleep in foo ns, bar ns.
      SMCP spec change : spec.security.trust.domain=old-td

      test script: https://github.com/maistra/maistra-test-tool/blob/maistra-2.1/pkg/tasks/security/authorization/trust_domain.go

      Expected behavior : after trust domain migrates to old-td. sleep in foo ns should curl a httpbin and gets 403. sleep in bar ns should curl a httpbin and gets 200

              jsantana@redhat.com Jonh Wendell
              yuaxu@redhat.com Yuanlin Xu
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: