Question

这是GKE上的全新Istio 1.1安装，群集版本为1.10。幸运的是，Istio 1.1尚未在1.10上进行测试，但是我的管理员要到六月才能升级。

Istio 1.1中有一项功能，在我需要的1.0中不存在。那就是配置网关以在kubernetes机密中查找TLS证书。

但是，由于Envoy没有显示任何访问日志，所以我无法使用任何应用程序。如果没有访问日志，该如何调试？

我确实在istio-proxy中看到很多deprecated日志：

  3  Using deprecated option 'envoy.api.v2.Cluster.hosts'. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.
 92  Using deprecated option 'envoy.api.v2.listener.Filter.config'. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.
  1  Using deprecated option 'envoy.api.v2.Listener.use_original_dst'. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.
 44  Using deprecated option 'envoy.api.v2.route.Route.per_filter_config'. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.
 19  Using deprecated option 'envoy.config.filter.network.http_connection_manager.v2.HttpFilter.config'. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.
  1  Using deprecated option 'envoy.config.trace.v2.Tracing.Http.config'. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.

这和它有关系吗？

Answer 1

没关系... Istio 1.1的新默认设置是必须启用Envoy访问日志记录...

https://github.com/istio/istio/issues/12854

Answer 2

您可能想在Istio中enable Envoy access logging。

Istio 1.1 Envoy访问日志未出现

2 个答案: