在 kubeflow 自定义 namespace 创建的 inferenceService 无法访问,出现 403 错误,RBAC: access denied
奇怪的问题
不知道为什么,只有增加这一条规则,才能访问。试了很多方法,只有这个奏效。
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: allow-all
namespace: yiqisoft
spec:
rules:
- {}
根据 inferenceService pod 来指定策略
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: allow-ovms
namespace: yiqisoft
spec:
selector:
matchLabels:
serving.kserve.io/inferenceservice: ovms
rules:
- {}
---
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: allow-sklearn-iris
namespace: yiqisoft
spec:
selector:
matchLabels:
serving.kserve.io/inferenceservice: sklearn-iris
rules:
- {}
``