Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-2679

OSSM 2.1 200+ members Authorization Policy Failed in applying Allow GET HTTP methods

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Obsolete
    • Icon: Major Major
    • None
    • maistra-2.1.0
    • None
    • False
    • False
    • qa_ack
    • Undefined

      When we test the OSSM 2.1 in a SMCP with 200+ members , we see a random failure in OSSM Authorization Policy for HTTP traffic case. The Authorization Policy was not always applied properly. However, after 50-60 seconds, we can get the correct configuration.

      • Need to investigate the performance and bottleneck from OSSM or API server.
      • Provide a test case script for reproduce the setting and test
      • Provide log collection information if needed.

      Build Info:
      OCP version:   4.8.10
      OSSM: 2.1 daily

      Test case :
      https://istio.io/v1.9/docs/tasks/security/authorization/authz-http/
      https://github.com/maistra/maistra-test-tool/blob/maistra-2.1/pkg/tasks/security/authorization/http.go

      How to reproduce:

      1. Deploy OSSM 2.1 operator and create SMCP 2.1
      2. Create 200+ members namespaces and add them into a SMMR
      3. Follow the Test case steps above and check sample application Bookinfo productpage after each Authoriation Policy configuration.
      4. Check RBAC access for bookinfo productpage

              Unassigned Unassigned
              yuaxu@redhat.com Yuanlin Xu
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: