-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
OSSM 2.6.0
-
None
-
False
-
-
False
-
User Experience
-
-
-
The Kiali UI is unable to connect to the Istio control plane. Kiali logs show errors like WRN Unable to get ready status of istiod and pods/portforward is forbidden.
Log
2026-01-29T11:49:14Z WRN Unable to get ready status of istiod: istio-system/istiod-lilly-kubed-smcp-858cc97b47-2tzdv. Err: error upgrading connection: pods "istiod-lilly-kubed-smcp-858cc97b47-2tzdv" is forbidden: User "L058429-CA@llynet.com" cannot create "pods/portforward" in API group "" in the namespace "istio-system" 2026-01-29T11:49:14Z ERR Failing starting the port forwarding
- The Role/RoldBinding has the correct portforward permissions.
- Kiali CR that the Maistra operator created has istiod_deployment_name configured.