-
Notifications
You must be signed in to change notification settings - Fork 4.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ext_authz: add logging options #35698
Conversation
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
CC @envoyproxy/api-shepherds: Your approval is needed for changes made to |
/assign tyxia |
/retest |
Signed-off-by: antoniovleonti <leonti@google.com>
/lgtm api |
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
@tyxia can you PTAL? |
Signed-off-by: antoniovleonti <leonti@google.com>
/retest |
Signed-off-by: antoniovleonti <leonti@google.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for working on this. Nice work!
Fleshing out the first pass of comments
source/extensions/filters/common/ext_authz/ext_authz_grpc_impl.h
Outdated
Show resolved
Hide resolved
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
@markdroth @tyxia i think this may be waiting on further review @antoniovleonti if you merge main the current arm fail should be resolved |
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
/lgtm api |
Signed-off-by: Antonio V. Leonti <53806445+antoniovleonti@users.noreply.github.com>
Signed-off-by: antoniovleonti <leonti@google.com>
… into authzstatimpl Signed-off-by: antoniovleonti <leonti@google.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM modulo nits. Nice work!
Please also merge main to resolve conflict. Thanks
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
Signed-off-by: antoniovleonti <leonti@google.com>
/retest |
@antoniovleonti Looks like retest did not work, please merge main to re-trigger the CI. Thanks! |
Signed-off-by: antoniovleonti <leonti@google.com>
/retest |
/retest |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, Thanks!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The majority logic of this PR is under config knob. i.e. it should not impact the regular ext_authz logic. Thus, I am merging it.
Commit Message: ext_authz: add logging options / stats
Additional Description:
logging_options enables ext_authz to emit per-stream stats through filter state for access logging. The stats emitted depend on the client used.
If envoy GRPC is used, latency, bytes sent, bytes received, upstream host, and cluster info are emitted. Otherwise, only latency is emitted.
If logging_options.filter_metadata is present, ext_authz will also emit the filter metadata in its logging info.
ext authz will only emit stats & and filter metadata if a request is made.
Testing: unit & integration tests
Docs Changes: none
Release Notes: changelog updated
Platform Specific Features: n/a