-
Bug
-
Resolution: Obsolete
-
Major
-
None
-
maistra-2.1.0
-
None
-
False
-
False
-
qa_ack
-
Undefined
-
When we test the OSSM 2.1 in a SMCP with 200+ members , we see a random failure in OSSM Authorization Policy for HTTP traffic case. The Authorization Policy was not always applied properly. However, after 50-60 seconds, we can get the correct configuration.
- Need to investigate the performance and bottleneck from OSSM or API server.
- Provide a test case script for reproduce the setting and test
- Provide log collection information if needed.
Build Info:
OCP version: 4.8.10
OSSM: 2.1 daily
Test case :
https://istio.io/v1.9/docs/tasks/security/authorization/authz-http/
https://github.com/maistra/maistra-test-tool/blob/maistra-2.1/pkg/tasks/security/authorization/http.go
How to reproduce:
1. Deploy OSSM 2.1 operator and create SMCP 2.1
2. Create 200+ members namespaces and add them into a SMMR
3. Follow the Test case steps above and check sample application Bookinfo productpage after each Authoriation Policy configuration.
4. Check RBAC access for bookinfo productpage
- clones
-
MAISTRA-2521 OVNKubernetes network OSSM Authorization Policy Failed in applying Allow GET HTTP methods
- Closed
- is related to
-
OSSM-282 Add ServiceMesh GA support for OVN networking
- Closed