How to implement istio authorization using oauth2 and keycloak

I have a similar error ( rbac access denied).And I have followed this tutorial (How to implement istio authorization based on keycloak user role) but it is not working . In addition to this I have not seen any virtual services in the tutorial. How are they configured?How I can test the connectivity ? How the cluster is created and configured ?