Istio 1.1 Envoy 访问日志没有出现

Question

这是在 GKE.The 集群版本 1.10 上全新安装的 Istio 1.1。不幸的是，Istio 1.1 尚未通过 1.10 进行测试，但我的管理员要到 6 月才会升级。

Istio 1.1 中有一个 1.0 中没有的功能是我需要的。那就是配置网关以在 kubernetes 秘密中查找 TLS 证书。

但是...我无法让任何应用程序运行，因为 Envoy 没有显示任何访问日志。如果我没有访问日志，我该如何调试？

我确实在 istio-proxy 中看到了很多 deprecated 日志：

  3  Using deprecated option 'envoy.api.v2.Cluster.hosts'. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.
 92  Using deprecated option 'envoy.api.v2.listener.Filter.config'. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.
  1  Using deprecated option 'envoy.api.v2.Listener.use_original_dst'. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.
 44  Using deprecated option 'envoy.api.v2.route.Route.per_filter_config'. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.
 19  Using deprecated option 'envoy.config.filter.network.http_connection_manager.v2.HttpFilter.config'. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.
  1  Using deprecated option 'envoy.config.trace.v2.Tracing.Http.config'. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.

这有关系吗？

Answer 1

没关系...看起来 Istio 1.1 的新默认设置是您必须启用 Envoy 访问日志...

https://github.com/istio/istio/issues/12854

Answer 2

您可能想 enable Envoy access logging 在 Istio 中。

Istio 1.1 Envoy 访问日志没有出现

Istio 1.1 Envoy access logs are not appearing

istio