2018-08-07 MSB Weekly Meeting Notes

Recordings

Attendees    

@Huabing Zhao

@Bo Lv

@Zi Li

@Bin Yang

Discussion items:



Review progress of work in current sprint

@Huabing Zhao



Istio mutual TLS authentication and RBAC authorization

@Huabing Zhao

  • We have been able to enable mutual TLS authentication for MSB Multicloud and VF-C.

  • RBAC authorization rules were created for Multicloud services access control

  • K8s liveness probe need to be disabled to enable Istio authentication, a workaround for that is replacing HTTP liveness probe with curl command.
    More about Istio TLS authentication and RBAC can be found ad this wiki page:
    Manage ONAP Microservices with Istio Service Mesh-Mutual TLS Authentication Enabled


Action Items