Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-572

Jaeger is not protected / Cannot be used with Kiali

    Details

    • Type: Bug
    • Status: Released (View Workflow)
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: maistra-0.12.0
    • Fix Version/s: maistra-rc1
    • Component/s: None
    • Labels:
      None

      Description

      The 0.12 pre-release configuration of Jaeger is configured to use the OAuth proxy, but its done in an insecure manner and it does not work with Kiali.

      The OAuth proxy is configured to allow any authorized user to access it. This means any user can log into Jaeger regardless of what permission levels they have.

      The OAuth proxy is also only configured to work through a browser and doesn't allow service access. This means that Kiali cannot properly communicate with the Jaeger endpoint and it considers Jaeger to be disabled.

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  juraci.costa Juraci Paixão Kröhling
                  Reporter:
                  mwringe Matt Wringe
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  6 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: