Skip to content

Instantly share code, notes, and snippets.

@danehans

danehans/envoy.log

Last active December 14, 2017 19:09
Show Gist options
  • Save danehans/0d11ebd25b4a48fed586b11ab2fae3ff to your computer and use it in GitHub Desktop.
Save danehans/0d11ebd25b4a48fed586b11ab2fae3ff to your computer and use it in GitHub Desktop.
Download ZIP
istio basic access control example
Raw
envoy.log
// You have to set logging level to debug in envoy:
// kubectl exec -it reviews-v3-77dfb9f77d-v7sj9 -c istio-proxy /bin/bash
// curl http://127.0.0.1:15000/logging?level=debug
// kubectl logs reviews-v3-77dfb9f77d-v7sj9 -c istio-proxy > proxy.log
[2017-12-14 18:37:32.488][2177][info][main] external/envoy/source/server/connection_handler_impl.cc:129] [C44] new connection
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:181] [C44] new stream
[2017-12-14 18:37:32.489][2177][debug][http] src/envoy/mixer/http_filter.cc:324] Called Mixer::Instance : Instance
[2017-12-14 18:37:32.489][2177][debug][http] src/envoy/mixer/http_filter.cc:383] Called Mixer::Instance : setDecoderFilterCallbacks
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:439] [C44][S6253685066161528132] request headers complete (end_stream=true):
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] 'accept':'application/json'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] 'x-request-id':'dc7acb36-e2bb-9634-a9ce-68ac6b82756a'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] 'x-b3-traceid':'7f939aa841090694'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] 'x-b3-spanid':'7152c3af2fe68166'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] 'x-b3-parentspanid':'7f939aa841090694'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] 'x-b3-sampled':'1'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] 'x-ot-span-context':'7f939aa841090694;7152c3af2fe68166;7f939aa841090694'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] 'user-agent':'Apache-CXF/3.1.11'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] 'cache-control':'no-cache'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] 'pragma':'no-cache'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] ':authority':'ratings:9080'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] 'connection':'keep-alive'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] ':path':'/ratings/0'
[2017-12-14 18:37:32.489][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:444] [C44][S6253685066161528132] ':method':'GET'
[2017-12-14 18:37:32.489][2177][debug][http] src/envoy/mixer/http_filter.cc:328] Called Mixer::Instance : decodeHeaders
[2017-12-14 18:37:32.489][2177][debug][http] src/envoy/mixer/http_filter.cc:125] Mixer forward attributes set: CkAKCnNvdXJjZS51aWQSMhIwa3ViZXJuZXRlczovL3Jldmlld3MtdjMtNzdkZmI5Zjc3ZC12N3NqOS5kZWZhdWx0ChMKCXNvdXJjZS5pcBIGMgQKwAJJ
[2017-12-14 18:37:32.489][2177][debug][http] src/envoy/mixer/http_filter.cc:389] Called Mixer::Instance : check complete OK
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:241] [C44][S6253685066161528132] cluster 'out.ratings.default.svc.cluster.local|http' match for URL '/ratings/0'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'accept':'application/json'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'x-request-id':'dc7acb36-e2bb-9634-a9ce-68ac6b82756a'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'x-b3-traceid':'7f939aa841090694'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'x-b3-spanid':'2cede7cf0f8b1f11'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'x-b3-parentspanid':'7152c3af2fe68166'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'x-b3-sampled':'1'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'x-ot-span-context':'7f939aa841090694;2cede7cf0f8b1f11;7152c3af2fe68166'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'user-agent':'Apache-CXF/3.1.11'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'cache-control':'no-cache'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'pragma':'no-cache'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] ':authority':'ratings:9080'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] ':path':'/ratings/0'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] ':method':'GET'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'x-forwarded-proto':'http'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'x-envoy-decorator-operation':'default-route'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] 'x-istio-attributes':'CkAKCnNvdXJjZS51aWQSMhIwa3ViZXJuZXRlczovL3Jldmlld3MtdjMtNzdkZmI5Zjc3ZC12N3NqOS5kZWZhdWx0ChMKCXNvdXJjZS5pcBIGMgQKwAJJ'
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:286] [C44][S6253685066161528132] ':scheme':'https'
[2017-12-14 18:37:32.489][2177][debug][pool] external/envoy/source/common/http/http1/conn_pool.cc:70] [C34] using existing connection
[2017-12-14 18:37:32.489][2177][debug][router] external/envoy/source/common/router/router.cc:885] [C44][S6253685066161528132] pool ready
[2017-12-14 18:37:32.493][2177][debug][router] external/envoy/source/common/router/router.cc:552] [C44][S6253685066161528132] upstream headers complete: end_stream=false
[2017-12-14 18:37:32.493][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:860] [C44][S6253685066161528132] encoding headers via codec (end_stream=false):
[2017-12-14 18:37:32.493][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:865] [C44][S6253685066161528132] 'content-length':'65'
[2017-12-14 18:37:32.493][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:865] [C44][S6253685066161528132] 'content-type':'text/plain'
[2017-12-14 18:37:32.493][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:865] [C44][S6253685066161528132] 'date':'Thu, 14 Dec 2017 18:37:32 GMT'
[2017-12-14 18:37:32.493][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:865] [C44][S6253685066161528132] 'server':'envoy'
[2017-12-14 18:37:32.493][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:865] [C44][S6253685066161528132] ':status':'403'
[2017-12-14 18:37:32.493][2177][debug][http] external/envoy/source/common/http/conn_manager_impl.cc:865] [C44][S6253685066161528132] 'x-envoy-upstream-service-time':'3'
[2017-12-14 18:37:32.493][2177][debug][client] external/envoy/source/common/http/codec_client.cc:81] [C34] response complete
Raw
mixer.log
I1214 17:16:56.748056 1 grpcServer.go:137] Dispatching Preprocess Check
I1214 17:16:56.748088 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:56.748145 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:56.748162 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:56.748453 1 grpcServer.go:152] Preprocess Check returned with: OK
I1214 17:16:56.748497 1 grpcServer.go:155] Dispatching to main adapters after running processors
I1214 17:16:56.748723 1 grpcServer.go:156] Attribute Bag:
context.protocol : http
destination.ip :
destination.uid : kubernetes://istio-ingress-96c9fcd78-cjdsz.istio-system
request.headers : map[accept-encoding:gzip, deflate accept-language:en-US,en;q=0.9 accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8 x-forwarded-proto:http x-envoy-decorator-operation:default-route :authority:bookinfo.example.com:32000 x-b3-traceid:88f25f8d903c5b10 x-b3-sampled:1 :method:GET user-agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 x-forwarded-for:10.192.0.3 x-envoy-internal:true x-ot-span-context:88f25f8d903c5b10;88f25f8d903c5b10;0000000000000000 cookie:user=jason :path:/logout upgrade-insecure-requests:1 x-b3-spanid:88f25f8d903c5b10 x-request-id:cbead9c8-5b24-9c63-ba86-2b1573dbeea0 referer:http://bookinfo.example.com:32000/productpage]
request.host : bookinfo.example.com:32000
request.method : GET
request.path : /logout
request.referer : http://bookinfo.example.com:32000/productpage
request.scheme : http
request.time : 2017-12-14 17:16:56.746679439 +0000 UTC
request.useragent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36
source.ip : [10 192 0 3]
source.port : 39804
---
destination.labels : map[istio:ingress pod-template-hash:527597834]
destination.namespace : istio-system
destination.service : ingress.istio-system.svc.cluster.local
destination.serviceAccount : istio-ingress-service-account
I1214 17:16:56.748754 1 grpcServer.go:159] Dispatching Check
I1214 17:16:56.748786 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_CHECK) 0 actions
I1214 17:16:56.748808 1 grpcServer.go:182] Check returned with ok
I1214 17:16:56.748820 1 grpcServer.go:239] Dispatching Quota: RequestCount
I1214 17:16:56.748840 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_QUOTA) 0 actions
I1214 17:16:56.751365 1 grpcServer.go:137] Dispatching Preprocess Check
I1214 17:16:56.751390 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:56.751429 1 runtime.go:176] no rules for global/default.svc.cluster.local
I1214 17:16:56.751459 1 runtime.go:176] no rules for global/productpage.default.svc.cluster.local
I1214 17:16:56.751477 1 runtime.go:176] no rules for default.svc.cluster.local/default.svc.cluster.local
I1214 17:16:56.751485 1 runtime.go:176] no rules for default.svc.cluster.local/productpage.default.svc.cluster.local
I1214 17:16:56.751489 1 runtime.go:176] no rules for productpage.default.svc.cluster.local/productpage.default.svc.cluster.local
I1214 17:16:56.751493 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:56.751504 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:56.751767 1 grpcServer.go:152] Preprocess Check returned with: OK
I1214 17:16:56.751783 1 grpcServer.go:155] Dispatching to main adapters after running processors
I1214 17:16:56.751863 1 grpcServer.go:156] Attribute Bag:
context.protocol : http
destination.ip : [10 192 2 74]
destination.service : productpage.default.svc.cluster.local
destination.uid : kubernetes://productpage-v1-675ddd566-hcmkp.default
request.headers : map[content-length:0 x-b3-traceid:88f25f8d903c5b10 x-b3-sampled:1 :path:/logout accept-language:en-US,en;q=0.9 referer:http://bookinfo.example.com:32000/productpage accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8 accept-encoding:gzip, deflate x-forwarded-for:10.192.0.3 user-agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 x-forwarded-proto:http upgrade-insecure-requests:1 :method:GET x-ot-span-context:88f25f8d903c5b10;88f25f8d903c5b10;0000000000000000 :authority:bookinfo.example.com:32000 cookie:user=jason x-b3-spanid:88f25f8d903c5b10 x-envoy-internal:true x-request-id:cbead9c8-5b24-9c63-ba86-2b1573dbeea0]
request.host : bookinfo.example.com:32000
request.method : GET
request.path : /logout
request.referer : http://bookinfo.example.com:32000/productpage
request.scheme : http
request.time : 2017-12-14 17:16:56.750065608 +0000 UTC
request.useragent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36
source.ip : [10 192 2 66]
source.port : 48450
source.uid : kubernetes://istio-ingress-96c9fcd78-cjdsz.istio-system
source.user : spiffe://cluster.local/ns/istio-system/sa/default
---
destination.labels : map[app:productpage pod-template-hash:231888122 version:v1]
destination.namespace : default
destination.serviceAccount : default
source.labels : map[pod-template-hash:527597834 istio:ingress]
source.namespace : istio-system
source.service : ingress.istio-system.svc.cluster.local
source.serviceAccount : istio-ingress-service-account
I1214 17:16:56.751892 1 grpcServer.go:159] Dispatching Check
I1214 17:16:56.752010 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_CHECK) 0 actions
I1214 17:16:56.752045 1 grpcServer.go:182] Check returned with ok
I1214 17:16:56.752063 1 grpcServer.go:239] Dispatching Quota: RequestCount
I1214 17:16:56.752089 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_QUOTA) 0 actions
I1214 17:16:56.891486 1 grpcServer.go:137] Dispatching Preprocess Check
I1214 17:16:56.891514 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:56.891566 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:56.891580 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:56.891849 1 grpcServer.go:152] Preprocess Check returned with: OK
I1214 17:16:56.891866 1 grpcServer.go:155] Dispatching to main adapters after running processors
I1214 17:16:56.891951 1 grpcServer.go:156] Attribute Bag:
context.protocol : http
destination.ip :
destination.uid : kubernetes://istio-ingress-96c9fcd78-cjdsz.istio-system
request.headers : map[user-agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8 x-b3-traceid:0823a49cdee374df x-ot-span-context:0823a49cdee374df;0823a49cdee374df;0000000000000000 x-b3-spanid:0823a49cdee374df :method:GET x-forwarded-proto:http upgrade-insecure-requests:1 x-request-id:14b27331-71c4-9052-a67a-1908bc2e54f9 x-envoy-internal:true x-envoy-decorator-operation:default-route x-b3-sampled:1 :authority:bookinfo.example.com:32000 accept-language:en-US,en;q=0.9 accept-encoding:gzip, deflate referer:http://bookinfo.example.com:32000/productpage :path:/productpage x-forwarded-for:10.192.0.3]
request.host : bookinfo.example.com:32000
request.method : GET
request.path : /productpage
request.referer : http://bookinfo.example.com:32000/productpage
request.scheme : http
request.time : 2017-12-14 17:16:56.890346849 +0000 UTC
request.useragent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36
source.ip : [10 192 0 3]
source.port : 39810
---
destination.labels : map[istio:ingress pod-template-hash:527597834]
destination.namespace : istio-system
destination.service : ingress.istio-system.svc.cluster.local
destination.serviceAccount : istio-ingress-service-account
I1214 17:16:56.891970 1 grpcServer.go:159] Dispatching Check
I1214 17:16:56.892006 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_CHECK) 0 actions
I1214 17:16:56.892030 1 grpcServer.go:182] Check returned with ok
I1214 17:16:56.892036 1 grpcServer.go:239] Dispatching Quota: RequestCount
I1214 17:16:56.892050 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_QUOTA) 0 actions
I1214 17:16:56.893938 1 grpcServer.go:137] Dispatching Preprocess Check
I1214 17:16:56.893973 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:56.894013 1 runtime.go:176] no rules for global/default.svc.cluster.local
I1214 17:16:56.894024 1 runtime.go:176] no rules for global/productpage.default.svc.cluster.local
I1214 17:16:56.894030 1 runtime.go:176] no rules for default.svc.cluster.local/default.svc.cluster.local
I1214 17:16:56.894036 1 runtime.go:176] no rules for default.svc.cluster.local/productpage.default.svc.cluster.local
I1214 17:16:56.894048 1 runtime.go:176] no rules for productpage.default.svc.cluster.local/productpage.default.svc.cluster.local
I1214 17:16:56.894055 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:56.894070 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:56.894331 1 grpcServer.go:152] Preprocess Check returned with: OK
I1214 17:16:56.894362 1 grpcServer.go:155] Dispatching to main adapters after running processors
I1214 17:16:56.894449 1 grpcServer.go:156] Attribute Bag:
context.protocol : http
destination.ip : [10 192 2 74]
destination.service : productpage.default.svc.cluster.local
destination.uid : kubernetes://productpage-v1-675ddd566-hcmkp.default
request.headers : map[content-length:0 accept-language:en-US,en;q=0.9 upgrade-insecure-requests:1 :authority:bookinfo.example.com:32000 x-b3-sampled:1 x-envoy-internal:true x-ot-span-context:0823a49cdee374df;0823a49cdee374df;0000000000000000 referer:http://bookinfo.example.com:32000/productpage user-agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 x-b3-traceid:0823a49cdee374df :path:/productpage x-forwarded-proto:http :method:GET x-request-id:14b27331-71c4-9052-a67a-1908bc2e54f9 x-forwarded-for:10.192.0.3 accept-encoding:gzip, deflate accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8 x-b3-spanid:0823a49cdee374df]
request.host : bookinfo.example.com:32000
request.method : GET
request.path : /productpage
request.referer : http://bookinfo.example.com:32000/productpage
request.scheme : http
request.time : 2017-12-14 17:16:56.893032278 +0000 UTC
request.useragent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36
source.ip : [10 192 2 66]
source.port : 48450
source.uid : kubernetes://istio-ingress-96c9fcd78-cjdsz.istio-system
source.user : spiffe://cluster.local/ns/istio-system/sa/default
---
destination.labels : map[app:productpage pod-template-hash:231888122 version:v1]
destination.namespace : default
destination.serviceAccount : default
source.labels : map[istio:ingress pod-template-hash:527597834]
source.namespace : istio-system
source.service : ingress.istio-system.svc.cluster.local
source.serviceAccount : istio-ingress-service-account
I1214 17:16:56.894485 1 grpcServer.go:159] Dispatching Check
I1214 17:16:56.894518 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_CHECK) 0 actions
I1214 17:16:56.894537 1 grpcServer.go:182] Check returned with ok
I1214 17:16:56.894548 1 grpcServer.go:239] Dispatching Quota: RequestCount
I1214 17:16:56.894564 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_QUOTA) 0 actions
I1214 17:16:56.899920 1 grpcServer.go:137] Dispatching Preprocess Check
I1214 17:16:56.899939 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:56.899970 1 runtime.go:176] no rules for global/default.svc.cluster.local
I1214 17:16:56.899982 1 runtime.go:176] no rules for global/details.default.svc.cluster.local
I1214 17:16:56.899986 1 runtime.go:176] no rules for default.svc.cluster.local/default.svc.cluster.local
I1214 17:16:56.899989 1 runtime.go:176] no rules for default.svc.cluster.local/details.default.svc.cluster.local
I1214 17:16:56.899997 1 runtime.go:176] no rules for details.default.svc.cluster.local/details.default.svc.cluster.local
I1214 17:16:56.900001 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:56.900010 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:56.900289 1 grpcServer.go:152] Preprocess Check returned with: OK
I1214 17:16:56.900324 1 grpcServer.go:155] Dispatching to main adapters after running processors
I1214 17:16:56.900420 1 grpcServer.go:156] Attribute Bag:
context.protocol : http
destination.ip : [10 192 2 69]
destination.service : details.default.svc.cluster.local
destination.uid : kubernetes://details-v1-675684689d-tz87d.default
request.headers : map[x-b3-spanid:ac823687ac07c72f :authority:details:9080 accept:*/* content-length:0 x-b3-parentspanid:0823a49cdee374df x-forwarded-proto:http :method:GET :path:/details/0 x-b3-traceid:0823a49cdee374df x-ot-span-context:0823a49cdee374df;ac823687ac07c72f;0823a49cdee374df user-agent:python-requests/2.18.4 x-request-id:14b27331-71c4-9052-a67a-1908bc2e54f9 accept-encoding:gzip, deflate x-b3-sampled:1]
request.host : details:9080
request.method : GET
request.path : /details/0
request.scheme : http
request.time : 2017-12-14 17:16:56.898857301 +0000 UTC
request.useragent : python-requests/2.18.4
source.ip : [10 192 2 74]
source.port : 47194
source.uid : kubernetes://productpage-v1-675ddd566-hcmkp.default
source.user : spiffe://cluster.local/ns/default/sa/default
---
destination.labels : map[app:details pod-template-hash:2312402458 version:v1]
destination.namespace : default
destination.serviceAccount : default
source.labels : map[pod-template-hash:231888122 version:v1 app:productpage]
source.namespace : default
source.service : productpage.default.svc.cluster.local
source.serviceAccount : default
I1214 17:16:56.900446 1 grpcServer.go:159] Dispatching Check
I1214 17:16:56.900486 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_CHECK) 0 actions
I1214 17:16:56.900503 1 grpcServer.go:182] Check returned with ok
I1214 17:16:56.900509 1 grpcServer.go:239] Dispatching Quota: RequestCount
I1214 17:16:56.900519 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_QUOTA) 0 actions
I1214 17:16:56.908689 1 grpcServer.go:137] Dispatching Preprocess Check
I1214 17:16:56.908714 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:56.908759 1 runtime.go:176] no rules for global/default.svc.cluster.local
I1214 17:16:56.908772 1 runtime.go:176] no rules for global/reviews.default.svc.cluster.local
I1214 17:16:56.908776 1 runtime.go:176] no rules for default.svc.cluster.local/default.svc.cluster.local
I1214 17:16:56.908779 1 runtime.go:176] no rules for default.svc.cluster.local/reviews.default.svc.cluster.local
I1214 17:16:56.908790 1 runtime.go:176] no rules for reviews.default.svc.cluster.local/reviews.default.svc.cluster.local
I1214 17:16:56.908795 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:56.908808 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:56.909093 1 grpcServer.go:152] Preprocess Check returned with: OK
I1214 17:16:56.909110 1 grpcServer.go:155] Dispatching to main adapters after running processors
I1214 17:16:56.909185 1 grpcServer.go:156] Attribute Bag:
context.protocol : http
destination.ip : [10 192 2 73]
destination.service : reviews.default.svc.cluster.local
destination.uid : kubernetes://reviews-v3-77dfb9f77d-v7sj9.default
request.headers : map[content-length:0 user-agent:python-requests/2.18.4 x-forwarded-proto:http accept:*/* x-b3-parentspanid:0823a49cdee374df x-ot-span-context:0823a49cdee374df;5ea57d38d4017a74;0823a49cdee374df x-b3-sampled:1 :path:/reviews/0 :method:GET x-b3-traceid:0823a49cdee374df :authority:reviews:9080 accept-encoding:gzip, deflate x-request-id:14b27331-71c4-9052-a67a-1908bc2e54f9 x-b3-spanid:5ea57d38d4017a74]
request.host : reviews:9080
request.method : GET
request.path : /reviews/0
request.scheme : http
request.time : 2017-12-14 17:16:56.907640482 +0000 UTC
request.useragent : python-requests/2.18.4
source.ip : [10 192 2 74]
source.port : 57012
source.uid : kubernetes://productpage-v1-675ddd566-hcmkp.default
source.user : spiffe://cluster.local/ns/default/sa/default
---
destination.labels : map[app:reviews pod-template-hash:3389659338 version:v3]
destination.namespace : default
destination.serviceAccount : default
source.labels : map[version:v1 app:productpage pod-template-hash:231888122]
source.namespace : default
source.service : productpage.default.svc.cluster.local
source.serviceAccount : default
I1214 17:16:56.909197 1 grpcServer.go:159] Dispatching Check
I1214 17:16:56.909224 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_CHECK) 0 actions
I1214 17:16:56.909241 1 grpcServer.go:182] Check returned with ok
I1214 17:16:56.909251 1 grpcServer.go:239] Dispatching Quota: RequestCount
I1214 17:16:56.909260 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_QUOTA) 0 actions
I1214 17:16:56.935072 1 grpcServer.go:137] Dispatching Preprocess Check
I1214 17:16:56.935096 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:56.935143 1 runtime.go:176] no rules for global/default.svc.cluster.local
I1214 17:16:56.935173 1 runtime.go:176] no rules for global/ratings.default.svc.cluster.local
I1214 17:16:56.935184 1 runtime.go:176] no rules for default.svc.cluster.local/default.svc.cluster.local
I1214 17:16:56.935188 1 runtime.go:176] no rules for default.svc.cluster.local/ratings.default.svc.cluster.local
I1214 17:16:56.935191 1 runtime.go:176] no rules for ratings.default.svc.cluster.local/ratings.default.svc.cluster.local
I1214 17:16:56.935202 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:56.935221 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:56.935593 1 grpcServer.go:152] Preprocess Check returned with: OK
I1214 17:16:56.935609 1 grpcServer.go:155] Dispatching to main adapters after running processors
I1214 17:16:56.935683 1 grpcServer.go:156] Attribute Bag:
context.protocol : http
destination.ip : [10 192 2 70]
destination.service : ratings.default.svc.cluster.local
destination.uid : kubernetes://ratings-v1-85c84f8946-42qbv.default
request.headers : map[accept:application/json cache-control:no-cache pragma:no-cache x-request-id:14b27331-71c4-9052-a67a-1908bc2e54f9 :method:GET x-b3-sampled:1 :path:/ratings/0 content-length:0 x-ot-span-context:0823a49cdee374df;c0daa483a5ef2ede;5ea57d38d4017a74 x-b3-spanid:c0daa483a5ef2ede x-b3-traceid:0823a49cdee374df x-forwarded-proto:http x-b3-parentspanid:5ea57d38d4017a74 :authority:ratings:9080 user-agent:Apache-CXF/3.1.11]
request.host : ratings:9080
request.method : GET
request.path : /ratings/0
request.scheme : http
request.time : 2017-12-14 17:16:56.933902123 +0000 UTC
request.useragent : Apache-CXF/3.1.11
source.ip : [10 192 2 73]
source.port : 53418
source.uid : kubernetes://reviews-v3-77dfb9f77d-v7sj9.default
source.user : spiffe://cluster.local/ns/default/sa/default
---
destination.labels : map[version:v1 app:ratings pod-template-hash:4174094502]
destination.namespace : default
destination.serviceAccount : default
source.labels : map[pod-template-hash:3389659338 version:v3 app:reviews]
source.namespace : default
source.service : reviews.default.svc.cluster.local
source.serviceAccount : default
I1214 17:16:56.935694 1 grpcServer.go:159] Dispatching Check
I1214 17:16:56.935723 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_CHECK) 1 actions
E1214 17:16:56.935795 1 grpcServer.go:184] Check returned with error : PERMISSION_DENIED (denyreviewsv3handler.denier.default:Not allowed)
I1214 17:16:57.760484 1 grpcServer.go:298] Dispatching Preprocess
I1214 17:16:57.760516 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:57.760566 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:57.760484 1 grpcServer.go:298] Dispatching Preprocess
I1214 17:16:57.760581 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:57.760652 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:57.760752 1 runtime.go:176] no rules for global/default.svc.cluster.local
I1214 17:16:57.760765 1 runtime.go:176] no rules for global/productpage.default.svc.cluster.local
I1214 17:16:57.760769 1 runtime.go:176] no rules for default.svc.cluster.local/default.svc.cluster.local
I1214 17:16:57.760779 1 runtime.go:176] no rules for default.svc.cluster.local/productpage.default.svc.cluster.local
I1214 17:16:57.760783 1 runtime.go:176] no rules for productpage.default.svc.cluster.local/productpage.default.svc.cluster.local
I1214 17:16:57.760793 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:57.760874 1 grpcServer.go:312] Preprocess returned with: OK
I1214 17:16:57.760889 1 grpcServer.go:315] Dispatching to main adapters after running processors
I1214 17:16:57.760805 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:57.760987 1 grpcServer.go:316] Attribute Bag:
context.protocol : http
destination.ip :
destination.uid : kubernetes://istio-ingress-96c9fcd78-cjdsz.istio-system
request.headers : map[x-request-id:cbead9c8-5b24-9c63-ba86-2b1573dbeea0 :path:/logout accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8 x-envoy-internal:true x-forwarded-proto:http accept-encoding:gzip, deflate cookie:user=jason x-b3-traceid:88f25f8d903c5b10 accept-language:en-US,en;q=0.9 x-b3-sampled:1 user-agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 :authority:bookinfo.example.com:32000 upgrade-insecure-requests:1 x-envoy-decorator-operation:default-route referer:http://bookinfo.example.com:32000/productpage x-ot-span-context:88f25f8d903c5b10;88f25f8d903c5b10;0000000000000000 x-b3-spanid:88f25f8d903c5b10 x-forwarded-for:10.192.0.3 :method:GET]
request.host : bookinfo.example.com:32000
request.method : GET
request.path : /logout
request.referer : http://bookinfo.example.com:32000/productpage
request.scheme : http
request.size : 0
request.time : 2017-12-14 17:16:56.746679439 +0000 UTC
request.useragent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36
response.code : 302
response.duration : 9.501ms
response.headers : map[:status:302 set-cookie:user=; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Path=/ x-envoy-upstream-service-time:5 content-type:text/html; charset=utf-8 date:Thu, 14 Dec 2017 17:16:56 GMT content-length:297 location:http://bookinfo.example.com:32000/productpage server:envoy]
response.size : 297
response.time : 2017-12-14 17:16:56.755904777 +0000 UTC
source.ip : [10 192 0 3]
source.port : 39804
---
destination.labels : map[istio:ingress pod-template-hash:527597834]
destination.namespace : istio-system
destination.service : ingress.istio-system.svc.cluster.local
destination.serviceAccount : istio-ingress-service-account
I1214 17:16:57.761002 1 grpcServer.go:319] Dispatching Report 0 out of 2
I1214 17:16:57.761059 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_REPORT) 4 actions
I1214 17:16:57.761168 1 grpcServer.go:312] Preprocess returned with: OK
I1214 17:16:57.761225 1 grpcServer.go:315] Dispatching to main adapters after running processors
I1214 17:16:57.761379 1 grpcServer.go:316] Attribute Bag:
context.protocol : http
destination.ip : [10 192 2 74]
destination.service : productpage.default.svc.cluster.local
destination.uid : kubernetes://productpage-v1-675ddd566-hcmkp.default
request.headers : map[x-b3-traceid:88f25f8d903c5b10 x-forwarded-for:10.192.0.3 x-b3-sampled:1 x-b3-spanid:88f25f8d903c5b10 x-forwarded-proto:http cookie:user=jason x-envoy-internal:true :path:/logout referer:http://bookinfo.example.com:32000/productpage user-agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 :authority:bookinfo.example.com:32000 upgrade-insecure-requests:1 accept-language:en-US,en;q=0.9 accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8 accept-encoding:gzip, deflate :method:GET content-length:0 x-request-id:cbead9c8-5b24-9c63-ba86-2b1573dbeea0 x-ot-span-context:88f25f8d903c5b10;88f25f8d903c5b10;0000000000000000]
request.host : bookinfo.example.com:32000
request.method : GET
request.path : /logout
request.referer : http://bookinfo.example.com:32000/productpage
request.scheme : http
request.size : 0
request.time : 2017-12-14 17:16:56.750065608 +0000 UTC
request.useragent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36
response.code : 302
response.duration : 5.546ms
response.headers : map[x-envoy-upstream-service-time:2 content-length:297 date:Thu, 14 Dec 2017 17:16:56 GMT server:envoy set-cookie:user=; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Path=/ location:http://bookinfo.example.com:32000/productpage content-type:text/html; charset=utf-8 :status:302]
response.size : 297
response.time : 2017-12-14 17:16:56.755235975 +0000 UTC
source.ip : [10 192 2 66]
source.port : 48450
{"level":"warn","ts":"2017-12-14T17:16:56.746Z","instance":"newlog.logentry.istio-system","destination":"ingress.istio-system.svc.cluster.local","latency":"9.501ms","responseCode":302,"responseSize":297,"source":"unknown","user":"unknown"}
source.uid : kubernetes://istio-ingress-96c9fcd78-cjdsz.istio-system
source.user : spiffe://cluster.local/ns/istio-system/sa/default
---
destination.labels : map[pod-template-hash:231888122 version:v1 app:productpage]
destination.namespace : default
destination.serviceAccount : default
source.labels : map[istio:ingress pod-template-hash:527597834]
source.namespace : istio-system
source.service : ingress.istio-system.svc.cluster.local
source.serviceAccount : istio-ingress-service-account
I1214 17:16:57.761395 1 grpcServer.go:319] Dispatching Report 0 out of 2
I1214 17:16:57.761425 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_REPORT) 4 actions
{"level":"warn","ts":"2017-12-14T17:16:56.750Z","instance":"newlog.logentry.istio-system","destination":"productpage","latency":"5.546ms","responseCode":302,"responseSize":297,"source":"ingress.istio-system.svc.cluster.local","user":"spiffe://cluster.local/ns/istio-system/sa/default"}
{"level":"info","ts":"2017-12-14T17:16:56.750Z","instance":"accesslog.logentry.istio-system","destinationIp":"10.192.2.74","latency":"5.546ms","method":"GET","protocol":"http","requestSize":0,"responseCode":302,"responseSize":297,"sourceIp":"10.192.2.66","sourceUser":"spiffe://cluster.local/ns/istio-system/sa/default","url":"/logout"}
{"level":"info","ts":"2017-12-14T17:16:56.746Z","instance":"accesslog.logentry.istio-system","destinationIp":"","latency":"9.501ms","method":"GET","protocol":"http","requestSize":0,"responseCode":302,"responseSize":297,"sourceIp":"10.192.0.3","sourceUser":"","url":"/logout"}
I1214 17:16:57.767513 1 grpcServer.go:333] Report 0 returned with: OK
I1214 17:16:57.767690 1 mutableBag.go:400] Updating bag from wire attributes:
setting string attributes:
request.path -> '/productpage'
setting int64 attributes:
response.code -> '200'
source.port -> '39810'
response.size -> '4415'
setting double attributes:
setting bool attributes:
setting timestamp attributes:
response.time -> '2017-12-14 17:16:56.950453708 +0000 UTC'
request.time -> '2017-12-14 17:16:56.890346849 +0000 UTC'
setting duration attributes:
response.duration -> '60.409ms'
setting bytes attributes:
setting string map attributes:
response.headers
content-length -> '4415'
content-type -> 'text/html; charset=utf-8'
date -> 'Thu, 14 Dec 2017 17:16:56 GMT'
server -> 'envoy'
:status -> '200'
x-envoy-upstream-service-time -> '56'
request.headers
x-forwarded-proto -> 'http'
x-request-id -> '14b27331-71c4-9052-a67a-1908bc2e54f9'
accept-encoding -> 'gzip, deflate'
referer -> 'http://bookinfo.example.com:32000/productpage'
user-agent -> 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36'
:method -> 'GET'
:path -> '/productpage'
accept-language -> 'en-US,en;q=0.9'
accept -> 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8'
x-envoy-decorator-operation -> 'default-route'
x-b3-traceid -> '0823a49cdee374df'
x-envoy-internal -> 'true'
x-b3-spanid -> '0823a49cdee374df'
x-forwarded-for -> '10.192.0.3'
upgrade-insecure-requests -> '1'
x-ot-span-context -> '0823a49cdee374df;0823a49cdee374df;0000000000000000'
x-b3-sampled -> '1'
:authority -> 'bookinfo.example.com:32000'
I1214 17:16:57.767744 1 grpcServer.go:298] Dispatching Preprocess
I1214 17:16:57.767771 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:57.767822 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:57.767850 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:57.767752 1 grpcServer.go:333] Report 0 returned with: OK
I1214 17:16:57.768390 1 mutableBag.go:400] Updating bag from wire attributes:
setting string attributes:
request.path -> '/productpage'
setting int64 attributes:
response.code -> '200'
response.size -> '4415'
setting double attributes:
setting bool attributes:
setting timestamp attributes:
request.time -> '2017-12-14 17:16:56.893032278 +0000 UTC'
response.time -> '2017-12-14 17:16:56.949592799 +0000 UTC'
setting duration attributes:
response.duration -> '56.825ms'
setting bytes attributes:
setting string map attributes:
request.headers
x-b3-sampled -> '1'
accept-encoding -> 'gzip, deflate'
x-forwarded-proto -> 'http'
referer -> 'http://bookinfo.example.com:32000/productpage'
content-length -> '0'
x-b3-spanid -> '0823a49cdee374df'
x-forwarded-for -> '10.192.0.3'
:path -> '/productpage'
x-request-id -> '14b27331-71c4-9052-a67a-1908bc2e54f9'
accept-language -> 'en-US,en;q=0.9'
user-agent -> 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36'
x-envoy-internal -> 'true'
:authority -> 'bookinfo.example.com:32000'
:method -> 'GET'
x-ot-span-context -> '0823a49cdee374df;0823a49cdee374df;0000000000000000'
upgrade-insecure-requests -> '1'
x-b3-traceid -> '0823a49cdee374df'
accept -> 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8'
response.headers
date -> 'Thu, 14 Dec 2017 17:16:56 GMT'
server -> 'envoy'
:status -> '200'
x-envoy-upstream-service-time -> '54'
content-length -> '4415'
content-type -> 'text/html; charset=utf-8'
I1214 17:16:57.768453 1 grpcServer.go:298] Dispatching Preprocess
I1214 17:16:57.768473 1 grpcServer.go:312] Preprocess returned with: OK
I1214 17:16:57.768515 1 grpcServer.go:315] Dispatching to main adapters after running processors
I1214 17:16:57.768476 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:57.768741 1 runtime.go:176] no rules for global/default.svc.cluster.local
I1214 17:16:57.768764 1 runtime.go:176] no rules for global/productpage.default.svc.cluster.local
I1214 17:16:57.768908 1 runtime.go:176] no rules for default.svc.cluster.local/default.svc.cluster.local
I1214 17:16:57.768937 1 runtime.go:176] no rules for default.svc.cluster.local/productpage.default.svc.cluster.local
I1214 17:16:57.768946 1 runtime.go:176] no rules for productpage.default.svc.cluster.local/productpage.default.svc.cluster.local
I1214 17:16:57.768963 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:57.768981 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:57.769138 1 grpcServer.go:316] Attribute Bag:
context.protocol : http
destination.ip :
destination.uid : kubernetes://istio-ingress-96c9fcd78-cjdsz.istio-system
request.headers : map[x-b3-spanid:88f25f8d903c5b10 x-forwarded-for:10.192.0.3 :method:GET upgrade-insecure-requests:1 x-envoy-decorator-operation:default-route referer:http://bookinfo.example.com:32000/productpage x-ot-span-context:88f25f8d903c5b10;88f25f8d903c5b10;0000000000000000 x-envoy-internal:true x-request-id:cbead9c8-5b24-9c63-ba86-2b1573dbeea0 :path:/logout accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8 x-b3-traceid:88f25f8d903c5b10 x-forwarded-proto:http accept-encoding:gzip, deflate cookie:user=jason :authority:bookinfo.example.com:32000 accept-language:en-US,en;q=0.9 x-b3-sampled:1 user-agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36]
request.host : bookinfo.example.com:32000
request.method : GET
request.path : /logout
request.referer : http://bookinfo.example.com:32000/productpage
request.scheme : http
request.size : 0
request.time : 2017-12-14 17:16:56.746679439 +0000 UTC
request.useragent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36
response.code : 302
response.duration : 9.501ms
response.headers : map[content-length:297 location:http://bookinfo.example.com:32000/productpage server:envoy :status:302 set-cookie:user=; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Path=/ x-envoy-upstream-service-time:5 content-type:text/html; charset=utf-8 date:Thu, 14 Dec 2017 17:16:56 GMT]
response.size : 297
response.time : 2017-12-14 17:16:56.755904777 +0000 UTC
{"level":"warn","ts":"2017-12-14T17:16:56.890Z","instance":"newlog.logentry.istio-system","destination":"ingress.istio-system.svc.cluster.local","latency":"60.409ms","responseCode":200,"responseSize":4415,"source":"unknown","user":"unknown"}
source.ip : [10 192 0 3]
source.port : 39804
---
request.headers : map[:authority:bookinfo.example.com:32000 x-forwarded-for:10.192.0.3 accept-encoding:gzip, deflate user-agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 :method:GET x-b3-traceid:0823a49cdee374df x-forwarded-proto:http accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8 upgrade-insecure-requests:1 x-ot-span-context:0823a49cdee374df;0823a49cdee374df;0000000000000000 accept-language:en-US,en;q=0.9 referer:http://bookinfo.example.com:32000/productpage :path:/productpage x-envoy-decorator-operation:default-route x-envoy-internal:true x-b3-spanid:0823a49cdee374df x-b3-sampled:1 x-request-id:14b27331-71c4-9052-a67a-1908bc2e54f9]
request.path : /productpage
request.time : 2017-12-14 17:16:56.890346849 +0000 UTC
response.code : 200
response.duration : 60.409ms
response.headers : map[server:envoy :status:200 x-envoy-upstream-service-time:56 content-length:4415 content-type:text/html; charset=utf-8 date:Thu, 14 Dec 2017 17:16:56 GMT]
response.size : 4415
response.time : 2017-12-14 17:16:56.950453708 +0000 UTC
source.port : 39810
---
destination.labels : map[istio:ingress pod-template-hash:527597834]
destination.namespace : istio-system
destination.service : ingress.istio-system.svc.cluster.local
destination.serviceAccount : istio-ingress-service-account
I1214 17:16:57.769150 1 grpcServer.go:319] Dispatching Report 1 out of 2
I1214 17:16:57.769206 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_REPORT) 4 actions
I1214 17:16:57.769520 1 grpcServer.go:312] Preprocess returned with: OK
I1214 17:16:57.769563 1 grpcServer.go:315] Dispatching to main adapters after running processors
{"level":"info","ts":"2017-12-14T17:16:56.890Z","instance":"accesslog.logentry.istio-system","destinationIp":"","latency":"60.409ms","method":"GET","protocol":"http","requestSize":0,"responseCode":200,"responseSize":4415,"sourceIp":"10.192.0.3","sourceUser":"","url":"/productpage"}
I1214 17:16:57.769804 1 grpcServer.go:333] Report 1 returned with: OK
I1214 17:16:57.769817 1 grpcServer.go:316] Attribute Bag:
context.protocol : http
destination.ip : [10 192 2 74]
destination.service : productpage.default.svc.cluster.local
destination.uid : kubernetes://productpage-v1-675ddd566-hcmkp.default
request.headers : map[referer:http://bookinfo.example.com:32000/productpage x-envoy-internal:true :path:/logout upgrade-insecure-requests:1 accept-language:en-US,en;q=0.9 accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8 user-agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 :authority:bookinfo.example.com:32000 content-length:0 x-request-id:cbead9c8-5b24-9c63-ba86-2b1573dbeea0 x-ot-span-context:88f25f8d903c5b10;88f25f8d903c5b10;0000000000000000 accept-encoding:gzip, deflate :method:GET x-b3-sampled:1 x-b3-spanid:88f25f8d903c5b10 x-forwarded-proto:http cookie:user=jason x-b3-traceid:88f25f8d903c5b10 x-forwarded-for:10.192.0.3]
request.host : bookinfo.example.com:32000
request.method : GET
request.path : /logout
request.referer : http://bookinfo.example.com:32000/productpage
request.scheme : http
request.size : 0
request.time : 2017-12-14 17:16:56.750065608 +0000 UTC
request.useragent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36
response.code : 302
response.duration : 5.546ms
response.headers : map[x-envoy-upstream-service-time:2 content-length:297 date:Thu, 14 Dec 2017 17:16:56 GMT server:envoy set-cookie:user=; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Path=/ location:http://bookinfo.example.com:32000/productpage content-type:text/html; charset=utf-8 :status:302]
response.size : 297
response.time : 2017-12-14 17:16:56.755235975 +0000 UTC
source.ip : [10 192 2 66]
source.port : 48450
source.uid : kubernetes://istio-ingress-96c9fcd78-cjdsz.istio-system
source.user : spiffe://cluster.local/ns/istio-system/sa/default
---
request.headers : map[x-forwarded-proto:http x-forwarded-for:10.192.0.3 x-envoy-internal:true accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8 x-b3-sampled:1 referer:http://bookinfo.example.com:32000/productpage content-length:0 :path:/productpage :authority:bookinfo.example.com:32000 x-b3-traceid:0823a49cdee374df x-b3-spanid:0823a49cdee374df x-request-id:14b27331-71c4-9052-a67a-1908bc2e54f9 :method:GET upgrade-insecure-requests:1 accept-encoding:gzip, deflate accept-language:en-US,en;q=0.9 user-agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 x-ot-span-context:0823a49cdee374df;0823a49cdee374df;0000000000000000]
request.path : /productpage
request.time : 2017-12-14 17:16:56.893032278 +0000 UTC
response.code : 200
response.duration : 56.825ms
response.headers : map[x-envoy-upstream-service-time:54 content-length:4415 content-type:text/html; charset=utf-8 date:Thu, 14 Dec 2017 17:16:56 GMT server:envoy :status:200]
response.size : 4415
response.time : 2017-12-14 17:16:56.949592799 +0000 UTC
---
destination.labels : map[version:v1 app:productpage pod-template-hash:231888122]
destination.namespace : default
destination.serviceAccount : default
source.labels : map[pod-template-hash:527597834 istio:ingress]
source.namespace : istio-system
source.service : ingress.istio-system.svc.cluster.local
source.serviceAccount : istio-ingress-service-account
I1214 17:16:57.769827 1 grpcServer.go:319] Dispatching Report 1 out of 2
I1214 17:16:57.769885 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_REPORT) 4 actions
{"level":"warn","ts":"2017-12-14T17:16:56.893Z","instance":"newlog.logentry.istio-system","destination":"productpage","latency":"56.825ms","responseCode":200,"responseSize":4415,"source":"ingress.istio-system.svc.cluster.local","user":"spiffe://cluster.local/ns/istio-system/sa/default"}
{"level":"info","ts":"2017-12-14T17:16:56.893Z","instance":"accesslog.logentry.istio-system","destinationIp":"10.192.2.74","latency":"56.825ms","method":"GET","protocol":"http","requestSize":0,"responseCode":200,"responseSize":4415,"sourceIp":"10.192.2.66","sourceUser":"spiffe://cluster.local/ns/istio-system/sa/default","url":"/productpage"}
I1214 17:16:57.771695 1 grpcServer.go:333] Report 1 returned with: OK
I1214 17:16:57.907670 1 grpcServer.go:298] Dispatching Preprocess
I1214 17:16:57.907697 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:57.907756 1 runtime.go:176] no rules for global/default.svc.cluster.local
I1214 17:16:57.907762 1 runtime.go:176] no rules for global/details.default.svc.cluster.local
I1214 17:16:57.907766 1 runtime.go:176] no rules for default.svc.cluster.local/default.svc.cluster.local
I1214 17:16:57.907781 1 runtime.go:176] no rules for default.svc.cluster.local/details.default.svc.cluster.local
I1214 17:16:57.907784 1 runtime.go:176] no rules for details.default.svc.cluster.local/details.default.svc.cluster.local
I1214 17:16:57.907795 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:57.907808 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:57.908128 1 grpcServer.go:312] Preprocess returned with: OK
I1214 17:16:57.908149 1 grpcServer.go:315] Dispatching to main adapters after running processors
I1214 17:16:57.908250 1 grpcServer.go:316] Attribute Bag:
context.protocol : http
destination.ip : [10 192 2 69]
destination.service : details.default.svc.cluster.local
destination.uid : kubernetes://details-v1-675684689d-tz87d.default
request.headers : map[x-ot-span-context:0823a49cdee374df;ac823687ac07c72f;0823a49cdee374df :method:GET x-forwarded-proto:http x-b3-traceid:0823a49cdee374df x-b3-spanid:ac823687ac07c72f x-b3-parentspanid:0823a49cdee374df accept:*/* x-b3-sampled:1 accept-encoding:gzip, deflate :authority:details:9080 x-request-id:14b27331-71c4-9052-a67a-1908bc2e54f9 content-length:0 user-agent:python-requests/2.18.4 :path:/details/0]
request.host : details:9080
request.method : GET
request.path : /details/0
request.scheme : http
request.size : 0
request.time : 2017-12-14 17:16:56.898857301 +0000 UTC
request.useragent : python-requests/2.18.4
response.code : 200
response.duration : 4.559ms
response.headers : map[content-length:178 content-type:application/json date:Thu, 14 Dec 2017 17:16:56 GMT server:envoy :status:200 x-envoy-upstream-service-time:1]
response.size : 178
response.time : 2017-12-14 17:16:56.903091189 +0000 UTC
source.ip : [10 192 2 74]
source.port : 47194
source.uid : kubernetes://productpage-v1-675ddd566-hcmkp.default
source.user : spiffe://cluster.local/ns/default/sa/default
---
destination.labels : map[version:v1 app:details pod-template-hash:2312402458]
destination.namespace : default
destination.serviceAccount : default
source.labels : map[version:v1 app:productpage pod-template-hash:231888122]
source.namespace : default
source.service : productpage.default.svc.cluster.local
source.serviceAccount : default
I1214 17:16:57.908270 1 grpcServer.go:319] Dispatching Report 0 out of 1
I1214 17:16:57.908301 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_REPORT) 4 actions
{"level":"warn","ts":"2017-12-14T17:16:56.898Z","instance":"newlog.logentry.istio-system","destination":"details","latency":"4.559ms","responseCode":200,"responseSize":178,"source":"productpage","user":"spiffe://cluster.local/ns/default/sa/default"}
{"level":"info","ts":"2017-12-14T17:16:56.898Z","instance":"accesslog.logentry.istio-system","destinationIp":"10.192.2.69","latency":"4.559ms","method":"GET","protocol":"http","requestSize":0,"responseCode":200,"responseSize":178,"sourceIp":"10.192.2.74","sourceUser":"spiffe://cluster.local/ns/default/sa/default","url":"/details/0"}
I1214 17:16:57.908764 1 grpcServer.go:333] Report 0 returned with: OK
I1214 17:16:57.940252 1 grpcServer.go:298] Dispatching Preprocess
I1214 17:16:57.940278 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:57.940321 1 runtime.go:176] no rules for global/default.svc.cluster.local
I1214 17:16:57.940334 1 runtime.go:176] no rules for global/ratings.default.svc.cluster.local
I1214 17:16:57.940339 1 runtime.go:176] no rules for default.svc.cluster.local/default.svc.cluster.local
I1214 17:16:57.940348 1 runtime.go:176] no rules for default.svc.cluster.local/ratings.default.svc.cluster.local
I1214 17:16:57.940351 1 runtime.go:176] no rules for ratings.default.svc.cluster.local/ratings.default.svc.cluster.local
I1214 17:16:57.940362 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:57.940374 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:57.940697 1 grpcServer.go:312] Preprocess returned with: OK
I1214 17:16:57.940737 1 grpcServer.go:315] Dispatching to main adapters after running processors
I1214 17:16:57.940851 1 grpcServer.go:316] Attribute Bag:
context.protocol : http
destination.ip : [10 192 2 70]
destination.service : ratings.default.svc.cluster.local
destination.uid : kubernetes://ratings-v1-85c84f8946-42qbv.default
request.headers : map[x-b3-spanid:c0daa483a5ef2ede x-ot-span-context:0823a49cdee374df;c0daa483a5ef2ede;5ea57d38d4017a74 x-request-id:14b27331-71c4-9052-a67a-1908bc2e54f9 x-forwarded-proto:http :method:GET pragma:no-cache :path:/ratings/0 accept:application/json content-length:0 x-b3-sampled:1 :authority:ratings:9080 x-b3-parentspanid:5ea57d38d4017a74 cache-control:no-cache user-agent:Apache-CXF/3.1.11 x-b3-traceid:0823a49cdee374df]
request.host : ratings:9080
request.method : GET
request.path : /ratings/0
request.scheme : http
request.size : 0
request.time : 2017-12-14 17:16:56.933902123 +0000 UTC
request.useragent : Apache-CXF/3.1.11
response.code : 403
response.duration : 2.971ms
response.headers : map[server:envoy :status:403 date:Thu, 14 Dec 2017 17:16:56 GMT content-length:65 content-type:text/plain]
response.size : 65
response.time : 2017-12-14 17:16:56.93661385 +0000 UTC
source.ip : [10 192 2 73]
source.port : 53418
source.uid : kubernetes://reviews-v3-77dfb9f77d-v7sj9.default
source.user : spiffe://cluster.local/ns/default/sa/default
---
destination.labels : map[version:v1 app:ratings pod-template-hash:4174094502]
destination.namespace : default
destination.serviceAccount : default
source.labels : map[pod-template-hash:3389659338 version:v3 app:reviews]
source.namespace : default
source.service : reviews.default.svc.cluster.local
source.serviceAccount : default
I1214 17:16:57.940879 1 grpcServer.go:319] Dispatching Report 0 out of 1
I1214 17:16:57.940916 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_REPORT) 4 actions
{"level":"warn","ts":"2017-12-14T17:16:56.933Z","instance":"newlog.logentry.istio-system","destination":"ratings","latency":"2.971ms","responseCode":403,"responseSize":65,"source":"reviews","user":"spiffe://cluster.local/ns/default/sa/default"}
{"level":"info","ts":"2017-12-14T17:16:56.933Z","instance":"accesslog.logentry.istio-system","destinationIp":"10.192.2.70","latency":"2.971ms","method":"GET","protocol":"http","requestSize":0,"responseCode":403,"responseSize":65,"sourceIp":"10.192.2.73","sourceUser":"spiffe://cluster.local/ns/default/sa/default","url":"/ratings/0"}
I1214 17:16:57.941460 1 grpcServer.go:333] Report 0 returned with: OK
I1214 17:16:57.947332 1 grpcServer.go:298] Dispatching Preprocess
I1214 17:16:57.947353 1 runtime.go:113] unconditionally resolving for kinds: [attributes]
I1214 17:16:57.947418 1 runtime.go:176] no rules for global/default.svc.cluster.local
I1214 17:16:57.947432 1 runtime.go:176] no rules for global/reviews.default.svc.cluster.local
I1214 17:16:57.947437 1 runtime.go:176] no rules for default.svc.cluster.local/default.svc.cluster.local
I1214 17:16:57.947440 1 runtime.go:176] no rules for default.svc.cluster.local/reviews.default.svc.cluster.local
I1214 17:16:57.947450 1 runtime.go:176] no rules for reviews.default.svc.cluster.local/reviews.default.svc.cluster.local
I1214 17:16:57.947458 1 runtime.go:121] unconditionally resolved configs (err=<nil>): [kubernetes]
I1214 17:16:57.947470 1 manager.go:190] Resolved 1 configs: [builder: name:"default" kind:"attributes" impl:"kubernetes" params:&Params{KubeconfigPath:,CacheRefreshDuration:5m0s,SourceUidInputName:sourceUID,DestinationUidInputName:destinationUID,OriginUidInputName:originUID,PodLabelForService:app,SourcePrefix:source,DestinationPrefix:destination,OriginPrefix:origin,LabelsValueName:Labels,PodNameValueName:PodName,PodIpValueName:PodIP,HostIpValueName:HostIP,NamespaceValueName:Namespace,ServiceAccountValueName:ServiceAccountName,ServiceValueName:Service,ClusterDomainName:svc.cluster.local,PodLabelForIstioComponentService:istio,SourceIpInputName:sourceIP,DestinationIpInputName:destinationIP,OriginIpInputName:originIP,LookupIngressSourceAndOriginValues:false,FullyQualifiedIstioIngressServiceName:ingress.istio-system.svc.cluster.local,} aspect: kind:"attributes" adapter:"default" params:&AttributesGeneratorParams{InputExpressions:map[string]string{destinationIP: destination.ip | ip("0.0.0.0"),destinationUID: destination.uid | "",sourceIP: source.ip | ip("0.0.0.0"),sourceUID: source.uid | "",},AttributeBindings:map[string]string{destination.ip: destinationPodIP,destination.labels: destinationLabels,destination.namespace: destinationNamespace,destination.service: destinationService,destination.serviceAccount: destinationServiceAccountName,source.ip: sourcePodIP,source.labels: sourceLabels,source.namespace: sourceNamespace,source.service: sourceService,source.serviceAccount: sourceServiceAccountName,},} ]
I1214 17:16:57.947727 1 grpcServer.go:312] Preprocess returned with: OK
I1214 17:16:57.947742 1 grpcServer.go:315] Dispatching to main adapters after running processors
I1214 17:16:57.947831 1 grpcServer.go:316] Attribute Bag:
context.protocol : http
destination.ip : [10 192 2 73]
destination.service : reviews.default.svc.cluster.local
destination.uid : kubernetes://reviews-v3-77dfb9f77d-v7sj9.default
request.headers : map[accept-encoding:gzip, deflate x-b3-traceid:0823a49cdee374df :path:/reviews/0 :method:GET user-agent:python-requests/2.18.4 x-b3-parentspanid:0823a49cdee374df content-length:0 x-b3-sampled:1 x-b3-spanid:5ea57d38d4017a74 x-ot-span-context:0823a49cdee374df;5ea57d38d4017a74;0823a49cdee374df x-forwarded-proto:http accept:*/* :authority:reviews:9080 x-request-id:14b27331-71c4-9052-a67a-1908bc2e54f9]
request.host : reviews:9080
request.method : GET
request.path : /reviews/0
request.scheme : http
request.size : 0
request.time : 2017-12-14 17:16:56.907640482 +0000 UTC
request.useragent : python-requests/2.18.4
response.code : 200
response.duration : 38.994ms
response.headers : map[content-type:application/json date:Thu, 14 Dec 2017 17:16:56 GMT server:envoy content-language:en-US content-length:295 :status:200 x-envoy-upstream-service-time:36 x-powered-by:Servlet/3.1]
response.size : 295
response.time : 2017-12-14 17:16:56.946373077 +0000 UTC
source.ip : [10 192 2 74]
source.port : 57012
source.uid : kubernetes://productpage-v1-675ddd566-hcmkp.default
source.user : spiffe://cluster.local/ns/default/sa/default
---
destination.labels : map[pod-template-hash:3389659338 version:v3 app:reviews]
destination.namespace : default
destination.serviceAccount : default
source.labels : map[version:v1 app:productpage pod-template-hash:231888122]
source.namespace : default
source.service : productpage.default.svc.cluster.local
source.serviceAccount : default
I1214 17:16:57.947849 1 grpcServer.go:319] Dispatching Report 0 out of 1
I1214 17:16:57.947871 1 dispatcher.go:166] Resolved (TEMPLATE_VARIETY_REPORT) 4 actions
{"level":"warn","ts":"2017-12-14T17:16:56.907Z","instance":"newlog.logentry.istio-system","destination":"reviews","latency":"38.994ms","responseCode":200,"responseSize":295,"source":"productpage","user":"spiffe://cluster.local/ns/default/sa/default"}
{"level":"info","ts":"2017-12-14T17:16:56.907Z","instance":"accesslog.logentry.istio-system","destinationIp":"10.192.2.73","latency":"38.994ms","method":"GET","protocol":"http","requestSize":0,"responseCode":200,"responseSize":295,"sourceIp":"10.192.2.74","sourceUser":"spiffe://cluster.local/ns/default/sa/default","url":"/reviews/0"}
Raw
reviews.log
cat reviews.log
Launching defaultServer (WebSphere Application Server 17.0.0.2/wlp-1.0.17.cl170220170523-1818) on IBM J9 VM, version 8.0.5.0 - pxa6480sr5-20170905_01(SR5) (en_US)
[AUDIT ] CWWKE0001I: The server defaultServer has been launched.
[AUDIT ] CWWKE0100I: This product is licensed for development, and limited production use. The full license terms can be viewed here: https://public.dhe.ibm.com/ibmdl/export/pub/software/websphere/wasdev/license/base_ilan/ilan/17.0.0.2/lafiles/en.html
[AUDIT ] CWWKT0016I: Web application available (default_host): http://reviews-v3-77dfb9f77d-v7sj9:9080/
[AUDIT ] CWWKZ0001I: Application reviews-app started in 0.767 seconds.
[AUDIT ] CWWKF0012I: The server installed the following features: [servlet-3.1, json-1.0, jsonp-1.0, jaxrs-2.0, jaxrsClient-2.0].
[AUDIT ] CWWKF0011I: The server defaultServer is ready to run a smarter planet.
Error: unable to contact http://ratings:9080/ratings got status of 403
Error: unable to contact http://ratings:9080/ratings got status of 403
Error: unable to contact http://ratings:9080/ratings got status of 403
Error: unable to contact http://ratings:9080/ratings got status of 403
Error: unable to contact http://ratings:9080/ratings got status of 403
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment