-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ext_authz: add logging options #35698
Conversation
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
CC @envoyproxy/api-shepherds: Your approval is needed for changes made to |
/assign tyxia |
/retest |
Signed-off-by: antoniovleonti <[email protected]>
/lgtm api |
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
@tyxia can you PTAL? |
Signed-off-by: antoniovleonti <[email protected]>
/retest |
Signed-off-by: antoniovleonti <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for working on this. Nice work!
Fleshing out the first pass of comments
source/extensions/filters/common/ext_authz/ext_authz_grpc_impl.h
Outdated
Show resolved
Hide resolved
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
@markdroth @tyxia i think this may be waiting on further review @antoniovleonti if you merge main the current arm fail should be resolved |
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
/lgtm api |
Signed-off-by: Antonio V. Leonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
… into authzstatimpl Signed-off-by: antoniovleonti <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM modulo nits. Nice work!
Please also merge main to resolve conflict. Thanks
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
Signed-off-by: antoniovleonti <[email protected]>
/retest |
@antoniovleonti Looks like retest did not work, please merge main to re-trigger the CI. Thanks! |
Signed-off-by: antoniovleonti <[email protected]>
/retest |
/retest |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, Thanks!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The majority logic of this PR is under config knob. i.e. it should not impact the regular ext_authz logic. Thus, I am merging it.
… and logging (#37074) This PR adds field access support for ext_authz filter state object `ExtAuthzLoggingInfo`. It exposes simple fields * latency * bytesSent * bytesReceived This enables usage of ext_authz filter state in access logs, and any filter/logger using CEL after #35698. Signed-off-by: JACQUES Francois <[email protected]>
… and logging (#37074) This PR adds field access support for ext_authz filter state object `ExtAuthzLoggingInfo`. It exposes simple fields * latency * bytesSent * bytesReceived This enables usage of ext_authz filter state in access logs, and any filter/logger using CEL after envoyproxy/envoy#35698. Signed-off-by: JACQUES Francois <[email protected]> Mirrored from https://github.com/envoyproxy/envoy @ 004e6eeaa6b4066f2ba62ca440bbcfb9fb3bc228
Commit Message: ext_authz: add logging options / stats
Additional Description:
logging_options enables ext_authz to emit per-stream stats through filter state for access logging. The stats emitted depend on the client used.
If envoy GRPC is used, latency, bytes sent, bytes received, upstream host, and cluster info are emitted. Otherwise, only latency is emitted.
If logging_options.filter_metadata is present, ext_authz will also emit the filter metadata in its logging info.
ext authz will only emit stats & and filter metadata if a request is made.
Testing: unit & integration tests
Docs Changes: none
Release Notes: changelog updated
Platform Specific Features: n/a