Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Too (?) many logs with new Kubernetes security annotations #2500

Closed
gdarmont opened this issue Nov 30, 2017 · 1 comment
Closed

Too (?) many logs with new Kubernetes security annotations #2500

gdarmont opened this issue Nov 30, 2017 · 1 comment

Comments

@gdarmont
Copy link

Do you want to request a feature or report a bug?

A possible logging bug

What did you do?

Using the new security annotation "ingress.kubernetes.io/hsts-max-age" for Kubernetes in traefik1.5.0-rc1

What did you expect to see?

Not so much logs, as it creates a lots of noise.
Again, this may be work as expected, that's why I said is it a possible bug.

What did you see instead?

The following logs are logged every seconds (every Kubernetes endpoint event in fact)

 2017-11-30T10:32:39.417163072Z time="2017-11-30T10:32:39Z" level=debug msg="Received Kubernetes event kind *v1.Endpoints" 
2017-11-30T10:32:39.417225305Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load traefik.frontend.entryPoints annotation, skipping..." 
2017-11-30T10:32:39.417250086Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load ingress.kubernetes.io/whitelist-source-range annotation, skipping..." 
2017-11-30T10:32:39.417262604Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load ingress.kubernetes.io/custom-request-headers annotation, skipping..." 
2017-11-30T10:32:39.417271808Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load ingress.kubernetes.io/custom-response-headers annotation, skipping..." 
2017-11-30T10:32:39.417280676Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load ingress.kubernetes.io/allowed-hosts annotation, skipping..." 
2017-11-30T10:32:39.417302616Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load ingress.kubernetes.io/proxy-headers annotation, skipping..." 
2017-11-30T10:32:39.417385279Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load ingress.kubernetes.io/ssl-proxy-headers annotation, skipping..." 
2017-11-30T10:32:39.417438467Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load traefik.frontend.entryPoints annotation, skipping..." 
2017-11-30T10:32:39.417497101Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load ingress.kubernetes.io/whitelist-source-range annotation, skipping..." 
2017-11-30T10:32:39.417592884Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load ingress.kubernetes.io/custom-request-headers annotation, skipping..." 
2017-11-30T10:32:39.417612415Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load ingress.kubernetes.io/custom-response-headers annotation, skipping..." 
2017-11-30T10:32:39.417636123Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load ingress.kubernetes.io/allowed-hosts annotation, skipping..." 
2017-11-30T10:32:39.417712609Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load ingress.kubernetes.io/proxy-headers annotation, skipping..." 
2017-11-30T10:32:39.417762786Z time="2017-11-30T10:32:39Z" level=debug msg="Could not load ingress.kubernetes.io/ssl-proxy-headers annotation, skipping..." 
2017-11-30T10:32:39.417962954Z time="2017-11-30T10:32:39Z" level=debug msg="Skipping Kubernetes event kind *v1.Endpoints" 

Output of traefik version: (What version of Traefik are you using?)

Version:      v1.5.0-rc1
Codename:     cancoillotte
Go version:   go1.9.2
Built:        2017-11-28_02:11:24PM
OS/Arch:      linux/amd64

What is your environment & configuration (arguments, toml, provider, platform, ...)?

A kubernets DaemonSet with the following spec

containers:
- image: "traefik:v1.5.0-rc1"
  name: traefik-ingress-lb
  imagePullPolicy: IfNotPresent
  ports:
  # HTTP (only allowed to do HTTPS redirection)
  - containerPort: 80
    hostPort: 80
  # Main port HTTPS
  - containerPort: 443
    hostPort: 443
  # Traefik IHM / health
  - containerPort: 8080
    hostPort: 8080
  livenessProbe:
    httpGet:
      path: /health
      port: 8080
      scheme: HTTPS
    initialDelaySeconds: 30
    timeoutSeconds: 2
  securityContext:
    privileged: true
  args:
  - --entryPoints=Name:https Address::443 TLS:/ssl/dacert.crt,/ssl/dacert.key
  - --entryPoints=Name:http Address::80 Redirect.EntryPoint:https
  - --defaultentrypoints=http,https
  - --kubernetes
  - --accessLogsFile=/log/traefik-access.log
  - --api
  - --entryPoints=Name:traefik Address::8080 TLS:/ssl/dacert.crt,/ssl/dacert.key
@mmatur mmatur added area/logs area/provider/k8s/ingress kind/bug/possible a possible bug that needs analysis before it is confirmed or fixed. labels Nov 30, 2017
@ldez ldez self-assigned this Nov 30, 2017
@ldez ldez added kind/bug/confirmed a confirmed bug (reproducible). and removed kind/bug/possible a possible bug that needs analysis before it is confirmed or fixed. labels Nov 30, 2017
@traefiker traefiker added this to the 1.5 milestone Dec 1, 2017
@traefiker
Copy link
Contributor

Closed by #2506.

@traefik traefik locked and limited conversation to collaborators Sep 1, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

4 participants