Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-2679

OSSM 2.1 200+ members Authorization Policy Failed in applying Allow GET HTTP methods

    XMLWordPrintable

Details

    • Bug
    • Resolution: Obsolete
    • Major
    • None
    • maistra-2.1.0
    • None
    • False
    • False
    • qa_ack
    • Undefined

    Description

      When we test the OSSM 2.1 in a SMCP with 200+ members , we see a random failure in OSSM Authorization Policy for HTTP traffic case. The Authorization Policy was not always applied properly. However, after 50-60 seconds, we can get the correct configuration.

      • Need to investigate the performance and bottleneck from OSSM or API server.
      • Provide a test case script for reproduce the setting and test
      • Provide log collection information if needed.

      Build Info:
      OCP version:   4.8.10
      OSSM: 2.1 daily

      Test case :
      https://istio.io/v1.9/docs/tasks/security/authorization/authz-http/
      https://github.com/maistra/maistra-test-tool/blob/maistra-2.1/pkg/tasks/security/authorization/http.go

      How to reproduce:

      1. Deploy OSSM 2.1 operator and create SMCP 2.1
      2. Create 200+ members namespaces and add them into a SMMR
      3. Follow the Test case steps above and check sample application Bookinfo productpage after each Authoriation Policy configuration.
      4. Check RBAC access for bookinfo productpage

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              yuaxu@redhat.com Yuanlin Xu
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: