Skip to content

Instantly share code, notes, and snippets.

@danehans

danehans/clusters

Last active November 29, 2017 01:35
Show Gist options
  • Save danehans/3d79b4f03a9f003d08e3596386999c97 to your computer and use it in GitHub Desktop.
Save danehans/3d79b4f03a9f003d08e3596386999c97 to your computer and use it in GitHub Desktop.
Download ZIP
istio_ingress_walk
Raw
clusters
# curl http://127.0.0.1:15000/clusters
<SNIP>
out.4bdc5a0e59af7107a7189467360a720381024b5c::default_priority::max_connections::1024
out.4bdc5a0e59af7107a7189467360a720381024b5c::default_priority::max_pending_requests::1024
out.4bdc5a0e59af7107a7189467360a720381024b5c::default_priority::max_requests::1024
out.4bdc5a0e59af7107a7189467360a720381024b5c::default_priority::max_retries::3
out.4bdc5a0e59af7107a7189467360a720381024b5c::high_priority::max_connections::1024
out.4bdc5a0e59af7107a7189467360a720381024b5c::high_priority::max_pending_requests::1024
out.4bdc5a0e59af7107a7189467360a720381024b5c::high_priority::max_requests::1024
out.4bdc5a0e59af7107a7189467360a720381024b5c::high_priority::max_retries::3
out.4bdc5a0e59af7107a7189467360a720381024b5c::added_via_api::true
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::cx_active::0
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::cx_connect_fail::0
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::cx_total::0
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::rq_active::0
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::rq_error::0
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::rq_success::0
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::rq_timeout::0
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::rq_total::0
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::health_flags::healthy
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::weight::1
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::region::
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::zone::
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::sub_zone::
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::canary::false
out.4bdc5a0e59af7107a7189467360a720381024b5c::10.192.2.16:9080::success_rate::-1
<SNIP>
Raw
egress_http
apiVersion: config.istio.io/v1alpha2
kind: EgressRule
metadata:
name: google-egress-rule
spec:
destination:
service: www.google.com
ports:
- port: 443
protocol: https
Raw
initializer_logs
$ kubectl logs istio-initializer-575f457bfb-qbwj6 -n istio-system
W1126 02:42:32.020000 1 client_config.go:529] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work.
I1126 02:42:32.020685 1 main.go:49] version @--
I1126 02:42:32.533425 1 http.go:100] Starting HTTP service at :8083
I1126 02:42:32.533535 1 initializer.go:229] Starting Istio sidecar initializer...
I1126 02:42:32.533545 1 initializer.go:230] Initializer name set to: sidecar.initializer.istio.io
I1126 02:42:32.533788 1 initializer.go:231] Options: (*inject.Config)(0xc42008e3c0)({
Policy: (inject.InjectionPolicy) (len=7) "enabled",
IncludeNamespaces: ([]string) (len=1 cap=4) {
(string) ""
},
ExcludeNamespaces: ([]string) <nil>,
Params: (inject.Params) {
InitImage: (string) (len=72) "gcr.io/istio-testing/proxy_init:3101ea9d82a5f83b699c2d3245b371a19fa6bef4",
ProxyImage: (string) (len=73) "gcr.io/istio-testing/proxy_debug:3101ea9d82a5f83b699c2d3245b371a19fa6bef4",
Verbosity: (int) 2,
SidecarProxyUID: (int64) 1337,
Version: (string) (len=40) "3101ea9d82a5f83b699c2d3245b371a19fa6bef4",
EnableCoreDump: (bool) false,
DebugMode: (bool) true,
Mesh: (*istio_proxy_v1_config.MeshConfig)(0xc4200c4480)(mixer_address:"istio-mixer.istio-system:15004" proxy_listen_port:15001 connect_timeout:<seconds:1 > ingress_class:"istio" ingress_service:"istio-ingress" ingress_controller_mode:STRICT auth_policy:MUTUAL_TLS rds_refresh_delay:<seconds:1 > enable_tracing:true access_log_file:"/dev/stdout" default_config:<config_path:"/etc/istio/proxy" binary_path:"/usr/local/bin/envoy" service_cluster:"istio-proxy" drain_duration:<seconds:45 > parent_shutdown_duration:<seconds:60 > discovery_address:"istio-pilot.istio-system:15003" discovery_refresh_delay:<seconds:1 > zipkin_address:"zipkin.istio-system:9411" connect_timeout:<seconds:10 > statsd_udp_address:"istio-mixer.istio-system:9125" proxy_admin_port:15000 control_plane_auth_policy:MUTUAL_TLS > ),
ImagePullPolicy: (string) (len=12) "IfNotPresent",
IncludeIPRanges: (string) ""
},
InitializerName: (string) (len=28) "sidecar.initializer.istio.io"
})
I1126 02:42:32.533802 1 initializer.go:233] Supported kinds:
I1126 02:42:32.533808 1 initializer.go:238] /v1 ReplicationController
I1126 02:42:32.533812 1 initializer.go:238] extensions/v1beta1 Deployment
I1126 02:42:32.533816 1 initializer.go:238] extensions/v1beta1 DaemonSet
I1126 02:42:32.533821 1 initializer.go:238] extensions/v1beta1 ReplicaSet
I1126 02:42:32.533826 1 initializer.go:238] batch/v1 Job
I1126 02:42:32.533830 1 initializer.go:238] batch/v2alpha1 CronJob
I1126 02:42:32.533836 1 initializer.go:238] apps/v1beta1 StatefulSet
I1126 02:42:32.541201 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment istio-system/istio-ca policy:"false" status:"" nil
I1126 02:42:32.541303 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment istio-system/istio-initializer policy:"false" status:"" nil
I1126 02:42:32.541326 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment kube-system/kube-dns policy:"" status:"" nil
I1126 02:42:32.541342 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment kube-system/kubernetes-dashboard policy:"" status:"" nil
I1126 02:42:32.541354 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment istio-system/istio-mixer policy:"false" status:"" nil
I1126 02:42:32.541370 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment istio-system/istio-pilot policy:"false" status:"" nil
I1126 02:42:32.541385 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment istio-system/istio-ingress policy:"false" status:"" nil
I1126 02:42:32.545785 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=DaemonSet kube-system/kube-proxy policy:"" status:"" nil
I1126 02:42:32.546073 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet istio-system/istio-ca-65c9744685 policy:"false" status:"" nil
I1126 02:42:32.546153 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet istio-system/istio-initializer-575f457bfb policy:"false" status:"" nil
I1126 02:42:32.546168 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet kube-system/kube-dns-5895d9587 policy:"" status:"" nil
I1126 02:42:32.546185 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet kube-system/kube-dns-7b6cdfd4df policy:"" status:"" nil
I1126 02:42:32.546199 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet kube-system/kubernetes-dashboard-5867bddc4c policy:"" status:"" nil
I1126 02:42:32.546213 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet istio-system/istio-mixer-747f9b7956 policy:"false" status:"" nil
I1126 02:42:32.546219 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet istio-system/istio-pilot-6f7946bf96 policy:"false" status:"" nil
I1126 02:42:32.546241 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet istio-system/istio-ingress-5d64d84f4 policy:"false" status:"" nil
<SNIP>
I1126 02:43:40.543302 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment istio-system/prometheus policy:"false" status:"" &Initializers{Pending:[{sidecar.initializer.istio.io}],Result:nil,}
I1126 02:43:40.543585 1 inject.go:501] Skipping istio-system/prometheus due to policy check
I1126 02:43:40.562135 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet istio-system/prometheus-6c98899bc9 policy:"false" status:"" nil
<SNIP>
I1126 02:44:48.350898 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment istio-system/zipkin policy:"false" status:"" &Initializers{Pending:[{sidecar.initializer.istio.io}],Result:nil,}
I1126 02:44:48.351020 1 inject.go:501] Skipping istio-system/zipkin due to policy check
I1126 02:44:48.359417 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet istio-system/zipkin-c866f6d66 policy:"false" status:"" nil
<SNIP>
I1126 02:45:26.232524 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment istio-system/grafana policy:"false" status:"" &Initializers{Pending:[{sidecar.initializer.istio.io}],Result:nil,}
I1126 02:45:26.232656 1 inject.go:501] Skipping istio-system/grafana due to policy check
I1126 02:45:26.241468 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet istio-system/grafana-574647f54b policy:"false" status:"" nil
<SNIP>
I1126 02:46:30.147850 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment default/details-v1 policy:"" status:"" &Initializers{Pending:[{sidecar.initializer.istio.io}],Result:nil,}
I1126 02:46:30.147947 1 inject.go:301] Sidecar injection policy for default/details-v1: namespacePolicy:enabled useDefault:true inject:false status:"" required:true
I1126 02:46:30.160093 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet default/details-v1-9d9b86d48 policy:"" status:"injected-version-3101ea9d82a5f83b699c2d3245b371a19fa6bef4" nil
I1126 02:46:30.394214 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment default/ratings-v1 policy:"" status:"" &Initializers{Pending:[{sidecar.initializer.istio.io}],Result:nil,}
I1126 02:46:30.394406 1 inject.go:301] Sidecar injection policy for default/ratings-v1: namespacePolicy:enabled useDefault:true inject:false status:"" required:true
I1126 02:46:30.401839 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet default/ratings-v1-6d8658447b policy:"" status:"injected-version-3101ea9d82a5f83b699c2d3245b371a19fa6bef4" nil
I1126 02:46:30.601559 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment default/reviews-v1 policy:"" status:"" &Initializers{Pending:[{sidecar.initializer.istio.io}],Result:nil,}
I1126 02:46:30.601649 1 inject.go:301] Sidecar injection policy for default/reviews-v1: namespacePolicy:enabled useDefault:true inject:false status:"" required:true
I1126 02:46:30.608787 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet default/reviews-v1-859c6cb958 policy:"" status:"injected-version-3101ea9d82a5f83b699c2d3245b371a19fa6bef4" nil
I1126 02:46:30.695785 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment default/reviews-v2 policy:"" status:"" &Initializers{Pending:[{sidecar.initializer.istio.io}],Result:nil,}
I1126 02:46:30.695879 1 inject.go:301] Sidecar injection policy for default/reviews-v2: namespacePolicy:enabled useDefault:true inject:false status:"" required:true
I1126 02:46:30.703790 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet default/reviews-v2-858895796b policy:"" status:"injected-version-3101ea9d82a5f83b699c2d3245b371a19fa6bef4" nil
I1126 02:46:30.793118 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment default/reviews-v3 policy:"" status:"" &Initializers{Pending:[{sidecar.initializer.istio.io}],Result:nil,}
I1126 02:46:30.793249 1 inject.go:301] Sidecar injection policy for default/reviews-v3: namespacePolicy:enabled useDefault:true inject:false status:"" required:true
I1126 02:46:30.802166 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet default/reviews-v3-85999cd96b policy:"" status:"injected-version-3101ea9d82a5f83b699c2d3245b371a19fa6bef4" nil
I1126 02:46:30.997871 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=Deployment default/productpage-v1 policy:"" status:"" &Initializers{Pending:[{sidecar.initializer.istio.io}],Result:nil,}
I1126 02:46:30.998027 1 inject.go:301] Sidecar injection policy for default/productpage-v1: namespacePolicy:enabled useDefault:true inject:false status:"" required:true
I1126 02:46:31.008735 1 initializer.go:174] ObjectMeta initializer info extensions/v1beta1, Kind=ReplicaSet default/productpage-v1-5dbc7b7576 policy:"" status:"injected-version-3101ea9d82a5f83b699c2d3245b371a19fa6bef4" nil
Raw
initializer_with_ipranges
apiVersion: v1
kind: ConfigMap
metadata:
name: istio-inject
namespace: istio-system
data:
config: |-
policy: "enabled"
namespaces: [""] # everything, aka v1.NamepsaceAll, aka cluster-wide
initializerName: "sidecar.initializer.istio.io"
params:
initImage: gcr.io/istio-testing/proxy_init:3101ea9d82a5f83b699c2d3245b371a19fa6bef4
proxyImage: gcr.io/istio-testing/proxy_debug:3101ea9d82a5f83b699c2d3245b371a19fa6bef4
verbosity: 2
version: 3101ea9d82a5f83b699c2d3245b371a19fa6bef4
meshConfigMapName: istio
imagePullPolicy: IfNotPresent
debugMode: true
includeIPRanges: 10.0.0.0/16
Raw
iptables
Chain KUBE-NODEPORTS (1 references)
target prot opt source destination
KUBE-SVC-JSIH6CCNAROIS6ON tcp -- anywhere anywhere /* istio-system/istio-ingress:http */ tcp dpt:32000
Chain KUBE-SVC-JSIH6CCNAROIS6ON (2 references)
target prot opt source destination
KUBE-SEP-CLHPTHVM65VKY5YL all -- anywhere anywhere /* istio-system/istio-ingress:http */
Chain KUBE-SEP-CLHPTHVM65VKY5YL (1 references)
target prot opt source destination
DNAT tcp -- anywhere anywhere /* istio-system/istio-ingress:http */ tcp to:10.192.2.6:80
Chain KUBE-SERVICES (2 references)
target prot opt source destination
<SNIP>
KUBE-SVC-JSIH6CCNAROIS6ON tcp -- anywhere 10.105.186.84 /* istio-system/istio-ingress:http cluster IP */ tcp dpt:http
<SNIP>
Raw
listeners
# curl http://127.0.0.1:15000/listeners
["0.0.0.0:80"]
# curl http://127.0.0.1:15000/routes
{
"version_info": "hash_a6b77ae4fe3a0737",
"route_config_name": "80",
"cluster_name": "rds",
"route_table_dump": {"name":"80","virtual_hosts":[{"name":"*","domains":["*"],
"routes":[{"match":{"prefix":"/"},"route":{"cluster":"out.4bdc5a0e59af7107a7189467360a720381024b5c"},
"metadata":{"filter_metadata":{"envoy.router":{"mixer_check":"on","mixer_report":"on","mixer_forward":"on"}}},
"decorator":{"operation":"productpage-default"}}]}]}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment