John Mazzitelli

I tested this and it appears to work for me. I take no credit for this, as these are [the same basic rules](https://github.com/kxr/ocp4_setup_upi_kvm/blob/d97e566ac9b8dea6a39d2f494f3380a09e35f7b6/.post_scripts/expose_cluster.sh#L128-L137) that are used by the [ocp4_setup_upi_kvm script](https://github.com/kxr/ocp4_setup_upi_kvm).

I will say for multi-tenant scenarios, the suggested/recommended solution is to use [accessible_namespaces](https://kiali.io/docs/configuration/namespace-management/) (i.e. do NOT use accessible namespaces of `['**']`) - so one Kiali instance per tenant. That's how...

I've seen this failure before - we never found out why it happens. There might even already be a github issue on this.

https://github.com/kiali/kiali/pull/2968#pullrequestreview-443706509

> Kiali can make it more obvious that the integration is broken without the `url` field being set. I don't know how much more obvious Kiali can make it ?...

Because ingresses can vary wildly across deployments, Kiali takes the position of either (a) letting the user [override the ingress yaml](https://kiali.io/docs/configuration/kialis.kiali.io/#.spec.deployment.ingress.override_yaml) or (b) [disabling the ingress](https://kiali.io/docs/configuration/kialis.kiali.io/#.spec.deployment.ingress.enabled) thus allowing you to...

Here's another interesting "ask" ... `Is there a way where we can identify which egress traffic is blocked by Istio?`

here's a .pdf I wrote up with a couple simple things [Troubleshooting with Kiali.pdf](https://github.com/kiali/kiali/files/9557362/Troubleshooting.with.Kiali.pdf)

FWIW: our molecule tests do some basic testing of our auth -- openid, token, header, and openshift auth. One thing we do not test is the authentication flow of openid...

That does seem really heavy. I don't think we've had anyone report the operator needing over 10GB memory. Something seems wrong. Have you tried a newer version of the operator?...