I have following below istio docs to integrate OPA with istio
This was one of the demo during [#IstioCon2021]
But i am getting exception, unable to use httpbin as workload with CUSTOM action
2022-09-07T13:00:14.576423Z debug envoy rbac enforced denied, matched policy *default-deny-all-due-to-bad-CUSTOM-action*
[2022-09-07T13:00:14.576Z] "GET /post HTTP/1.1" 403 - rbac_access_denied_matched_policy[default-deny-all-due-to-bad-CUSTOM-action]
Below is my auth policy:
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: httpbin-opa
spec:
selector:
matchLabels:
app: httpbin
action: CUSTOM
provider:
name: “opa.default”
rules:
- { }