Istio mutual TLS authentication and RBAC authorization | | - We have been able to enable mutual TLS authentication for MSB Multicloud and VF-C.
- RBAC authorization rules were created for Multicloud services access control
- K8s liveness probe need to be disabled to enable Istio authentication, a workaround for that is replacing HTTP liveness probe with curl command.
More about Istio TLS authentication and RBAC can be found ad this wiki page: Manage ONAP Microservices with Istio Service Mesh-Mutual TLS Authentication Enabled
|