Created
April 9, 2020 23:01
-
-
Save maruina/e8bd58559ab31de4c5ca9ac8f152cde0 to your computer and use it in GitHub Desktop.
Istio troubleshooting
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [ | |
| { | |
| "name": "BlackHoleCluster", | |
| "type": "STATIC", | |
| "connectTimeout": "10s" | |
| }, | |
| { | |
| "name": "InboundPassthroughClusterIpv4", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "upstreamBindConfig": { | |
| "sourceAddress": { | |
| "address": "127.0.0.6", | |
| "portValue": 0 | |
| } | |
| } | |
| }, | |
| { | |
| "name": "PassthroughCluster", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| } | |
| }, | |
| { | |
| "name": "outbound|9093||alertmanager-operated.monitoring.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-operator-alertmanager" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.9093_._.alertmanager-operated.monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|9094||alertmanager-operated.monitoring.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-operator-alertmanager" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.9094_._.alertmanager-operated.monitoring.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|8085||cluster-autoscaler-aws-cluster-autoscaler.kube-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|8085||cluster-autoscaler-aws-cluster-autoscaler.kube-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/kube-system/sa/cluster-autoscaler-aws-cluster-autoscaler" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.8085_._.cluster-autoscaler-aws-cluster-autoscaler.kube-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|53||coredns-coredns.kube-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|53||coredns-coredns.kube-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/kube-system/sa/coredns" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.53_._.coredns-coredns.kube-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|443||crosscell-gateway.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|443||crosscell-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/crosscell-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.443_._.crosscell-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15020||crosscell-gateway.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15020||crosscell-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/crosscell-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.15020_._.crosscell-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|50051||crosscell-gateway.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|50051||crosscell-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/crosscell-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.50051_._.crosscell-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|443||crossregion-gateway.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|443||crossregion-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/crossregion-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.443_._.crossregion-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15020||crossregion-gateway.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15020||crossregion-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/crossregion-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.15020_._.crossregion-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|50051||crossregion-gateway.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|50051||crossregion-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/crossregion-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.50051_._.crossregion-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|443||default-gateway.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|443||default-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/default-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.443_._.default-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15020||default-gateway.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15020||default-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/default-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.15020_._.default-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|50051||default-gateway.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|50051||default-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/default-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.50051_._.default-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|80||diogocells.skyscanner.io", | |
| "type": "STRICT_DNS", | |
| "connectTimeout": "1s", | |
| "loadAssignment": { | |
| "clusterName": "outbound|80||diogocells.skyscanner.io", | |
| "endpoints": [ | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1b", | |
| "subZone": "cellsdev-1-eu-west-1b-1" | |
| }, | |
| "lbEndpoints": [ | |
| { | |
| "endpoint": { | |
| "address": { | |
| "socketAddress": { | |
| "address": "172.17.224.11", | |
| "portValue": 443 | |
| } | |
| } | |
| }, | |
| "loadBalancingWeight": 1 | |
| } | |
| ], | |
| "loadBalancingWeight": 99 | |
| }, | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1a", | |
| "subZone": "cellsdev-1-eu-west-1a-1" | |
| }, | |
| "loadBalancingWeight": 1 | |
| } | |
| ] | |
| }, | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "validationContext": {} | |
| }, | |
| "sni": "diogocells.skyscanner.io" | |
| }, | |
| "dnsRefreshRate": "300s", | |
| "respectDnsTtl": true, | |
| "dnsLookupFamily": "V4_ONLY", | |
| "outlierDetection": { | |
| "interval": "30s", | |
| "baseEjectionTime": "60s", | |
| "maxEjectionPercent": 70, | |
| "enforcingConsecutive5xx": 0, | |
| "consecutiveGatewayFailure": 10, | |
| "enforcingConsecutiveGatewayFailure": 100 | |
| }, | |
| "commonLbConfig": { | |
| "healthyPanicThreshold": {}, | |
| "localityWeightedLbConfig": {} | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/diogocells.skyscanner.io" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9881||drain-operator-metrics.drain-operator-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9881||drain-operator-metrics.drain-operator-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| } | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.9881_._.drain-operator-metrics.drain-operator-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|80||globe-poc-test-service.skyscanner.io", | |
| "type": "STRICT_DNS", | |
| "connectTimeout": "1s", | |
| "loadAssignment": { | |
| "clusterName": "outbound|80||globe-poc-test-service.skyscanner.io", | |
| "endpoints": [ | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1a", | |
| "subZone": "cellsdev-1-eu-west-1a-1" | |
| }, | |
| "loadBalancingWeight": 1 | |
| }, | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1b", | |
| "subZone": "cellsdev-1-eu-west-1b-1" | |
| }, | |
| "lbEndpoints": [ | |
| { | |
| "endpoint": { | |
| "address": { | |
| "socketAddress": { | |
| "address": "172.17.224.11", | |
| "portValue": 443 | |
| } | |
| } | |
| }, | |
| "loadBalancingWeight": 1 | |
| } | |
| ], | |
| "loadBalancingWeight": 99 | |
| } | |
| ] | |
| }, | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "validationContext": {} | |
| }, | |
| "sni": "globe-poc-test-service.skyscanner.io" | |
| }, | |
| "dnsRefreshRate": "300s", | |
| "respectDnsTtl": true, | |
| "dnsLookupFamily": "V4_ONLY", | |
| "outlierDetection": { | |
| "interval": "30s", | |
| "baseEjectionTime": "60s", | |
| "maxEjectionPercent": 70, | |
| "enforcingConsecutive5xx": 0, | |
| "consecutiveGatewayFailure": 10, | |
| "enforcingConsecutiveGatewayFailure": 100 | |
| }, | |
| "commonLbConfig": { | |
| "healthyPanicThreshold": {}, | |
| "localityWeightedLbConfig": {} | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/globe-poc-test-service.skyscanner.io" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|80||gw-test-service.skyscanner.io", | |
| "type": "STRICT_DNS", | |
| "connectTimeout": "1s", | |
| "loadAssignment": { | |
| "clusterName": "outbound|80||gw-test-service.skyscanner.io", | |
| "endpoints": [ | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1a", | |
| "subZone": "cellsdev-1-eu-west-1a-1" | |
| }, | |
| "loadBalancingWeight": 1 | |
| }, | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1b", | |
| "subZone": "cellsdev-1-eu-west-1b-1" | |
| }, | |
| "lbEndpoints": [ | |
| { | |
| "endpoint": { | |
| "address": { | |
| "socketAddress": { | |
| "address": "172.17.224.11", | |
| "portValue": 443 | |
| } | |
| } | |
| }, | |
| "loadBalancingWeight": 1 | |
| } | |
| ], | |
| "loadBalancingWeight": 99 | |
| } | |
| ] | |
| }, | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "validationContext": {} | |
| }, | |
| "sni": "gw-test-service.skyscanner.io" | |
| }, | |
| "dnsRefreshRate": "300s", | |
| "respectDnsTtl": true, | |
| "dnsLookupFamily": "V4_ONLY", | |
| "outlierDetection": { | |
| "interval": "30s", | |
| "baseEjectionTime": "60s", | |
| "maxEjectionPercent": 70, | |
| "enforcingConsecutive5xx": 0, | |
| "consecutiveGatewayFailure": 10, | |
| "enforcingConsecutiveGatewayFailure": 100 | |
| }, | |
| "commonLbConfig": { | |
| "healthyPanicThreshold": {}, | |
| "localityWeightedLbConfig": {} | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/gw-test-service.skyscanner.io" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|80||gw-test-service.webinfx.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|80||gw-test-service.webinfx.svc.cluster.local" | |
| }, | |
| "connectTimeout": "1s", | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/webinfx/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.80_._.gw-test-service.webinfx.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/webinfx/destination-rule/gw-test-service.webinfx.svc.cluster.local" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|5001||gw-test-service.webinfx.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|5001||gw-test-service.webinfx.svc.cluster.local" | |
| }, | |
| "connectTimeout": "1s", | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/webinfx/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.5001_._.gw-test-service.webinfx.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/webinfx/destination-rule/gw-test-service.webinfx.svc.cluster.local" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|5002||gw-test-service.webinfx.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|5002||gw-test-service.webinfx.svc.cluster.local" | |
| }, | |
| "connectTimeout": "1s", | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/webinfx/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.5002_._.gw-test-service.webinfx.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/webinfx/destination-rule/gw-test-service.webinfx.svc.cluster.local" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|80||infrabin.infrabin.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|80||infrabin.infrabin.svc.cluster.local" | |
| }, | |
| "connectTimeout": "1s", | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/infrabin/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.80_._.infrabin.infrabin.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/infrabin/destination-rule/infrabin" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "inbound|80|http-service|infrabin.infrabin.svc.cluster.local", | |
| "type": "STATIC", | |
| "connectTimeout": "1s", | |
| "loadAssignment": { | |
| "clusterName": "inbound|80|http-service|infrabin.infrabin.svc.cluster.local", | |
| "endpoints": [ | |
| { | |
| "lbEndpoints": [ | |
| { | |
| "endpoint": { | |
| "address": { | |
| "socketAddress": { | |
| "address": "127.0.0.1", | |
| "portValue": 8080 | |
| } | |
| } | |
| } | |
| } | |
| ] | |
| } | |
| ] | |
| }, | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/infrabin/destination-rule/infrabin" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|80||infrabin.skyscanner.io", | |
| "type": "STRICT_DNS", | |
| "connectTimeout": "1s", | |
| "loadAssignment": { | |
| "clusterName": "outbound|80||infrabin.skyscanner.io", | |
| "endpoints": [ | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1a", | |
| "subZone": "cellsdev-1-eu-west-1a-1" | |
| }, | |
| "loadBalancingWeight": 1 | |
| }, | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1b", | |
| "subZone": "cellsdev-1-eu-west-1b-1" | |
| }, | |
| "lbEndpoints": [ | |
| { | |
| "endpoint": { | |
| "address": { | |
| "socketAddress": { | |
| "address": "172.17.224.11", | |
| "portValue": 443 | |
| } | |
| } | |
| }, | |
| "loadBalancingWeight": 1 | |
| } | |
| ], | |
| "loadBalancingWeight": 99 | |
| } | |
| ] | |
| }, | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "validationContext": {} | |
| }, | |
| "sni": "infrabin.skyscanner.io" | |
| }, | |
| "dnsRefreshRate": "300s", | |
| "respectDnsTtl": true, | |
| "dnsLookupFamily": "V4_ONLY", | |
| "outlierDetection": { | |
| "interval": "30s", | |
| "baseEjectionTime": "60s", | |
| "maxEjectionPercent": 70, | |
| "enforcingConsecutive5xx": 0, | |
| "consecutiveGatewayFailure": 10, | |
| "enforcingConsecutiveGatewayFailure": 100 | |
| }, | |
| "commonLbConfig": { | |
| "healthyPanicThreshold": {}, | |
| "localityWeightedLbConfig": {} | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/infrabin.skyscanner.io" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|8060||istio-citadel.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|8060||istio-citadel.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-citadel-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.8060_._.istio-citadel.istio-system.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15014||istio-citadel.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15014||istio-citadel.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-citadel-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.15014_._.istio-citadel.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|80||istio-config-testing.skyscanner.io", | |
| "type": "STRICT_DNS", | |
| "connectTimeout": "1s", | |
| "loadAssignment": { | |
| "clusterName": "outbound|80||istio-config-testing.skyscanner.io", | |
| "endpoints": [ | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1a", | |
| "subZone": "cellsdev-1-eu-west-1a-1" | |
| }, | |
| "loadBalancingWeight": 1 | |
| }, | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1b", | |
| "subZone": "cellsdev-1-eu-west-1b-1" | |
| }, | |
| "lbEndpoints": [ | |
| { | |
| "endpoint": { | |
| "address": { | |
| "socketAddress": { | |
| "address": "172.17.224.11", | |
| "portValue": 443 | |
| } | |
| } | |
| }, | |
| "loadBalancingWeight": 1 | |
| } | |
| ], | |
| "loadBalancingWeight": 99 | |
| } | |
| ] | |
| }, | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "validationContext": {} | |
| }, | |
| "sni": "istio-config-testing.skyscanner.io" | |
| }, | |
| "dnsRefreshRate": "300s", | |
| "respectDnsTtl": true, | |
| "dnsLookupFamily": "V4_ONLY", | |
| "outlierDetection": { | |
| "interval": "30s", | |
| "baseEjectionTime": "60s", | |
| "maxEjectionPercent": 70, | |
| "enforcingConsecutive5xx": 0, | |
| "consecutiveGatewayFailure": 10, | |
| "enforcingConsecutiveGatewayFailure": 100 | |
| }, | |
| "commonLbConfig": { | |
| "healthyPanicThreshold": {}, | |
| "localityWeightedLbConfig": {} | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/istio-config-testing.skyscanner.io" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|80||istio-config-testing.slingshot.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|80||istio-config-testing.slingshot.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "maxRequestsPerConnection": 10, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 1000, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/slingshot/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.80_._.istio-config-testing.slingshot.svc.cluster.local" | |
| }, | |
| "outlierDetection": { | |
| "interval": "60s", | |
| "baseEjectionTime": "300s", | |
| "enforcingConsecutive5xx": 0, | |
| "consecutiveGatewayFailure": 3, | |
| "enforcingConsecutiveGatewayFailure": 100 | |
| }, | |
| "commonLbConfig": { | |
| "healthyPanicThreshold": {}, | |
| "localityWeightedLbConfig": {} | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/slingshot/destination-rule/istio-config-testing.slingshot.svc.cluster.local" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|443||istio-galley.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|443||istio-galley.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-galley-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.443_._.istio-galley.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9901||istio-galley.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9901||istio-galley.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-galley-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.9901_._.istio-galley.istio-system.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15014||istio-galley.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15014||istio-galley.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-galley-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.15014_._.istio-galley.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|8080||istio-pilot.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|8080||istio-pilot.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-pilot-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.8080_._.istio-pilot.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15010||istio-pilot.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15010||istio-pilot.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-pilot-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.15010_._.istio-pilot.istio-system.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15011||istio-pilot.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15011||istio-pilot.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-pilot-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.15011_._.istio-pilot.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15014||istio-pilot.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15014||istio-pilot.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-pilot-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.15014_._.istio-pilot.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9091||istio-policy.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9091||istio-policy.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/istio-policy" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15004||istio-policy.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15004||istio-policy.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-mixer-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.15004_._.istio-policy.istio-system.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/istio-policy" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15014||istio-policy.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15014||istio-policy.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "maxRequestsPerConnection": 10000, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 10000, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/istio-policy" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|443||istio-sidecar-injector.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|443||istio-sidecar-injector.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-sidecar-injector-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.443_._.istio-sidecar-injector.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15014||istio-sidecar-injector.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15014||istio-sidecar-injector.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-sidecar-injector-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.15014_._.istio-sidecar-injector.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9091||istio-telemetry.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9091||istio-telemetry.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/istio-telemetry" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15004||istio-telemetry.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15004||istio-telemetry.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-mixer-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.15004_._.istio-telemetry.istio-system.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/istio-telemetry" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15014||istio-telemetry.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15014||istio-telemetry.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "maxRequestsPerConnection": 10000, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 10000, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/istio-telemetry" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|42422||istio-telemetry.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|42422||istio-telemetry.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "maxRequestsPerConnection": 10000, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 10000, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/istio-telemetry" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|80||k8s-security-testing.skyscanner.io", | |
| "type": "STRICT_DNS", | |
| "connectTimeout": "1s", | |
| "loadAssignment": { | |
| "clusterName": "outbound|80||k8s-security-testing.skyscanner.io", | |
| "endpoints": [ | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1a", | |
| "subZone": "cellsdev-1-eu-west-1a-1" | |
| }, | |
| "loadBalancingWeight": 1 | |
| }, | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1b", | |
| "subZone": "cellsdev-1-eu-west-1b-1" | |
| }, | |
| "lbEndpoints": [ | |
| { | |
| "endpoint": { | |
| "address": { | |
| "socketAddress": { | |
| "address": "172.17.224.11", | |
| "portValue": 443 | |
| } | |
| } | |
| }, | |
| "loadBalancingWeight": 1 | |
| } | |
| ], | |
| "loadBalancingWeight": 99 | |
| } | |
| ] | |
| }, | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "validationContext": {} | |
| }, | |
| "sni": "k8s-security-testing.skyscanner.io" | |
| }, | |
| "dnsRefreshRate": "300s", | |
| "respectDnsTtl": true, | |
| "dnsLookupFamily": "V4_ONLY", | |
| "outlierDetection": { | |
| "interval": "30s", | |
| "baseEjectionTime": "60s", | |
| "maxEjectionPercent": 70, | |
| "enforcingConsecutive5xx": 0, | |
| "consecutiveGatewayFailure": 10, | |
| "enforcingConsecutiveGatewayFailure": 100 | |
| }, | |
| "commonLbConfig": { | |
| "healthyPanicThreshold": {}, | |
| "localityWeightedLbConfig": {} | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/k8s-security-testing.skyscanner.io" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|20001||kiali.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|20001||kiali.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/kiali-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.20001_._.kiali.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|8181||kube2iam-metrics.kube-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|8181||kube2iam-metrics.kube-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/k8s-sec-monitoring/sa/falco", | |
| "spiffe://cluster.local/ns/kube-system/sa/kube2iam", | |
| "spiffe://cluster.local/ns/kube-system/sa/" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.8181_._.kube2iam-metrics.kube-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|443||kubernetes.default.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|443||kubernetes.default.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/api-server" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|80||lightstep-collector.lightstep.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|80||lightstep-collector.lightstep.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/lightstep/destination-rule/lightstep-collector.lightstep.svc.cluster.local" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|80||lightstep.skyscanner.io", | |
| "type": "STRICT_DNS", | |
| "connectTimeout": "1s", | |
| "loadAssignment": { | |
| "clusterName": "outbound|80||lightstep.skyscanner.io", | |
| "endpoints": [ | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1a", | |
| "subZone": "cellsdev-1-eu-west-1a-1" | |
| }, | |
| "loadBalancingWeight": 1 | |
| }, | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1b", | |
| "subZone": "cellsdev-1-eu-west-1b-1" | |
| }, | |
| "lbEndpoints": [ | |
| { | |
| "endpoint": { | |
| "address": { | |
| "socketAddress": { | |
| "address": "172.17.224.11", | |
| "portValue": 443 | |
| } | |
| } | |
| }, | |
| "loadBalancingWeight": 1 | |
| } | |
| ], | |
| "loadBalancingWeight": 99 | |
| } | |
| ] | |
| }, | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "validationContext": {} | |
| }, | |
| "sni": "lightstep.skyscanner.io" | |
| }, | |
| "dnsRefreshRate": "300s", | |
| "respectDnsTtl": true, | |
| "dnsLookupFamily": "V4_ONLY", | |
| "outlierDetection": { | |
| "interval": "30s", | |
| "baseEjectionTime": "60s", | |
| "maxEjectionPercent": 70, | |
| "enforcingConsecutive5xx": 0, | |
| "consecutiveGatewayFailure": 10, | |
| "enforcingConsecutiveGatewayFailure": 100 | |
| }, | |
| "commonLbConfig": { | |
| "healthyPanicThreshold": {}, | |
| "localityWeightedLbConfig": {} | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/lightstep.skyscanner.io" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|443||metric-server-metrics-server.kube-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|443||metric-server-metrics-server.kube-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/kube-system/sa/metric-server-metrics-server" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.443_._.metric-server-metrics-server.kube-system.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|443||metrics-server.kube-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|443||metrics-server.kube-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/kube-system/sa/metrics-server" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.443_._.metrics-server.kube-system.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "inbound|15020|mgmt-15020|mgmtCluster", | |
| "type": "STATIC", | |
| "connectTimeout": "10s", | |
| "loadAssignment": { | |
| "clusterName": "inbound|15020|mgmt-15020|mgmtCluster", | |
| "endpoints": [ | |
| { | |
| "lbEndpoints": [ | |
| { | |
| "endpoint": { | |
| "address": { | |
| "socketAddress": { | |
| "address": "127.0.0.1", | |
| "portValue": 15020 | |
| } | |
| } | |
| } | |
| } | |
| ] | |
| } | |
| ] | |
| }, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| } | |
| }, | |
| { | |
| "name": "outbound|443||prometheus-adapter.monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|443||prometheus-adapter.monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/monitoring/destination-rule/prometheus-adapter.monitoring.svc.cluster.local" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|9090||prometheus-istio.istio-monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9090||prometheus-istio.istio-monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-monitoring/sa/prometheus-istio" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.9090_._.prometheus-istio.istio-monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|10901||prometheus-istio.istio-monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|10901||prometheus-istio.istio-monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-monitoring/sa/prometheus-istio" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.10901_._.prometheus-istio.istio-monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9090||prometheus-operated.istio-monitoring.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-monitoring/sa/prometheus-istio" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.9090_._.prometheus-operated.istio-monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|10901||prometheus-operated.istio-monitoring.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-monitoring/sa/prometheus-istio" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.10901_._.prometheus-operated.istio-monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9090||prometheus-operated.monitoring.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-operator-prometheus", | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-user", | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-scaling" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.9090_._.prometheus-operated.monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|10901||prometheus-operated.monitoring.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-operator-prometheus", | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-user" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.10901_._.prometheus-operated.monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9090||prometheus-operated.thanos.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/thanos/sa/prometheus-prometheus-thanos-meta" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.9090_._.prometheus-operated.thanos.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|9093||prometheus-operator-alertmanager.monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9093||prometheus-operator-alertmanager.monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-operator-alertmanager" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.9093_._.prometheus-operator-alertmanager.monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|9153||prometheus-operator-coredns.kube-system.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/kube-system/sa/coredns" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.9153_._.prometheus-operator-coredns.kube-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|10252||prometheus-operator-kube-controller-manager.kube-system.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/kube-system/sa/" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.10252_._.prometheus-operator-kube-controller-manager.kube-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|2379||prometheus-operator-kube-etcd.kube-system.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/kube-system/sa/" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.2379_._.prometheus-operator-kube-etcd.kube-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|10249||prometheus-operator-kube-proxy.kube-system.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/k8s-sec-monitoring/sa/falco", | |
| "spiffe://cluster.local/ns/kube-system/sa/kube2iam", | |
| "spiffe://cluster.local/ns/kube-system/sa/" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.10249_._.prometheus-operator-kube-proxy.kube-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|10251||prometheus-operator-kube-scheduler.kube-system.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/kube-system/sa/" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.10251_._.prometheus-operator-kube-scheduler.kube-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|8080||prometheus-operator-kube-state-metrics.monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|8080||prometheus-operator-kube-state-metrics.monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-operator-kube-state-metrics" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.8080_._.prometheus-operator-kube-state-metrics.monitoring.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|10250||prometheus-operator-kubelet.kube-system.svc.cluster.local", | |
| "type": "ORIGINAL_DST", | |
| "connectTimeout": "10s", | |
| "lbPolicy": "CLUSTER_PROVIDED", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/kube-system/sa/kube2iam", | |
| "spiffe://cluster.local/ns/kube-system/sa/", | |
| "spiffe://cluster.local/ns/k8s-sec-monitoring/sa/falco" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.10250_._.prometheus-operator-kubelet.kube-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|443||prometheus-operator-operator.monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|443||prometheus-operator-operator.monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-operator-operator" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.443_._.prometheus-operator-operator.monitoring.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|8080||prometheus-operator-operator.monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|8080||prometheus-operator-operator.monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-operator-operator" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.8080_._.prometheus-operator-operator.monitoring.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9100||prometheus-operator-prometheus-node-exporter.monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9100||prometheus-operator-prometheus-node-exporter.monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/kube-system/sa/", | |
| "spiffe://cluster.local/ns/k8s-sec-monitoring/sa/falco", | |
| "spiffe://cluster.local/ns/kube-system/sa/kube2iam" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.9100_._.prometheus-operator-prometheus-node-exporter.monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|4433||prometheus-operator-prometheus.monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|4433||prometheus-operator-prometheus.monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-operator-prometheus" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.4433_._.prometheus-operator-prometheus.monitoring.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9090||prometheus-operator-prometheus.monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9090||prometheus-operator-prometheus.monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-operator-prometheus" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.9090_._.prometheus-operator-prometheus.monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|10901||prometheus-operator-prometheus.monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|10901||prometheus-operator-prometheus.monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-operator-prometheus" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.10901_._.prometheus-operator-prometheus.monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9090||prometheus-prometheus-thanos-meta.thanos.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9090||prometheus-prometheus-thanos-meta.thanos.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/thanos/sa/prometheus-prometheus-thanos-meta" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.9090_._.prometheus-prometheus-thanos-meta.thanos.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|9090||prometheus-scaling.monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9090||prometheus-scaling.monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-scaling" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.9090_._.prometheus-scaling.monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|9090||prometheus-thanos-bucket-web-interface.thanos.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9090||prometheus-thanos-bucket-web-interface.thanos.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/thanos/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.9090_._.prometheus-thanos-bucket-web-interface.thanos.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9090||prometheus-thanos-querier.thanos.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9090||prometheus-thanos-querier.thanos.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/thanos/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.9090_._.prometheus-thanos-querier.thanos.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|10901||prometheus-thanos-querier.thanos.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|10901||prometheus-thanos-querier.thanos.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/thanos/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.10901_._.prometheus-thanos-querier.thanos.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9201||prometheus-thanos-remote-storage-adapter.thanos.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9201||prometheus-thanos-remote-storage-adapter.thanos.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/thanos/destination-rule/prometheus-thanos-remote-storage-adapter.thanos.svc.cluster.local" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|9090||prometheus-thanos-store-gateway.thanos.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9090||prometheus-thanos-store-gateway.thanos.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/thanos/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.9090_._.prometheus-thanos-store-gateway.thanos.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|10901||prometheus-thanos-store-gateway.thanos.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|10901||prometheus-thanos-store-gateway.thanos.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/thanos/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.10901_._.prometheus-thanos-store-gateway.thanos.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9090||prometheus-user.monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9090||prometheus-user.monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-user" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.9090_._.prometheus-user.monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|10901||prometheus-user.monitoring.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|10901||prometheus-user.monitoring.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/monitoring/sa/prometheus-user" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.10901_._.prometheus-user.monitoring.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|9090||prometheus.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|9090||prometheus.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/prometheus" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.9090_._.prometheus.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "prometheus_stats", | |
| "type": "STATIC", | |
| "connectTimeout": "0.250s", | |
| "hosts": [ | |
| { | |
| "socketAddress": { | |
| "address": "127.0.0.1", | |
| "portValue": 15000 | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "name": "outbound|443||public-gateway.cells-public-routing.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|443||public-gateway.cells-public-routing.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/cells-public-routing/sa/public-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.443_._.public-gateway.cells-public-routing.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15020||public-gateway.cells-public-routing.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15020||public-gateway.cells-public-routing.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/cells-public-routing/sa/public-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.15020_._.public-gateway.cells-public-routing.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|80||ratelimit.cells-public-routing.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|80||ratelimit.cells-public-routing.svc.cluster.local" | |
| }, | |
| "connectTimeout": "1s", | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/cells-public-routing/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.80_._.ratelimit.cells-public-routing.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/cells-public-routing/destination-rule/ratelimit.cells-public-routing.svc.cluster.local" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|5001||ratelimit.cells-public-routing.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|5001||ratelimit.cells-public-routing.svc.cluster.local" | |
| }, | |
| "connectTimeout": "1s", | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/cells-public-routing/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.5001_._.ratelimit.cells-public-routing.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/cells-public-routing/destination-rule/ratelimit.cells-public-routing.svc.cluster.local" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|5002||ratelimit.cells-public-routing.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|5002||ratelimit.cells-public-routing.svc.cluster.local" | |
| }, | |
| "connectTimeout": "1s", | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/cells-public-routing/sa/default" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.5002_._.ratelimit.cells-public-routing.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/cells-public-routing/destination-rule/ratelimit.cells-public-routing.svc.cluster.local" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|80||ratelimit.skyscanner.io", | |
| "type": "STRICT_DNS", | |
| "connectTimeout": "1s", | |
| "loadAssignment": { | |
| "clusterName": "outbound|80||ratelimit.skyscanner.io", | |
| "endpoints": [ | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1a", | |
| "subZone": "cellsdev-1-eu-west-1a-1" | |
| }, | |
| "loadBalancingWeight": 1 | |
| }, | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1b", | |
| "subZone": "cellsdev-1-eu-west-1b-1" | |
| }, | |
| "lbEndpoints": [ | |
| { | |
| "endpoint": { | |
| "address": { | |
| "socketAddress": { | |
| "address": "172.17.224.11", | |
| "portValue": 443 | |
| } | |
| } | |
| }, | |
| "loadBalancingWeight": 1 | |
| } | |
| ], | |
| "loadBalancingWeight": 99 | |
| } | |
| ] | |
| }, | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "validationContext": {} | |
| }, | |
| "sni": "ratelimit.skyscanner.io" | |
| }, | |
| "dnsRefreshRate": "300s", | |
| "respectDnsTtl": true, | |
| "dnsLookupFamily": "V4_ONLY", | |
| "outlierDetection": { | |
| "interval": "30s", | |
| "baseEjectionTime": "60s", | |
| "maxEjectionPercent": 70, | |
| "enforcingConsecutive5xx": 0, | |
| "consecutiveGatewayFailure": 10, | |
| "enforcingConsecutiveGatewayFailure": 100 | |
| }, | |
| "commonLbConfig": { | |
| "healthyPanicThreshold": {}, | |
| "localityWeightedLbConfig": {} | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/ratelimit.skyscanner.io" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|443||thanos-gateway.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|443||thanos-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/thanos-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio" | |
| ] | |
| }, | |
| "sni": "outbound_.443_._.thanos-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "outbound|15020||thanos-gateway.istio-system.svc.cluster.local", | |
| "type": "EDS", | |
| "edsClusterConfig": { | |
| "edsConfig": { | |
| "ads": {} | |
| }, | |
| "serviceName": "outbound|15020||thanos-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "connectTimeout": "10s", | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/thanos-gateway-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "istio", | |
| "h2" | |
| ] | |
| }, | |
| "sni": "outbound_.15020_._.thanos-gateway.istio-system.svc.cluster.local" | |
| }, | |
| "http2ProtocolOptions": { | |
| "maxConcurrentStreams": 1073741824 | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/default" | |
| } | |
| } | |
| }, | |
| "protocolSelection": "USE_DOWNSTREAM_PROTOCOL" | |
| }, | |
| { | |
| "name": "outbound|80||thanos.skyscanner.io", | |
| "type": "STRICT_DNS", | |
| "connectTimeout": "1s", | |
| "loadAssignment": { | |
| "clusterName": "outbound|80||thanos.skyscanner.io", | |
| "endpoints": [ | |
| { | |
| "locality": { | |
| "region": "crosscell", | |
| "zone": "eu-west-1a", | |
| "subZone": "cellsdev-1-eu-west-1a-1" | |
| }, | |
| "loadBalancingWeight": 1 | |
| } | |
| ] | |
| }, | |
| "maxRequestsPerConnection": 100, | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 4294967295, | |
| "maxPendingRequests": 4294967295, | |
| "maxRequests": 4294967295, | |
| "maxRetries": 4294967295 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "validationContext": {} | |
| }, | |
| "sni": "thanos.skyscanner.io" | |
| }, | |
| "dnsRefreshRate": "300s", | |
| "respectDnsTtl": true, | |
| "dnsLookupFamily": "V4_ONLY", | |
| "outlierDetection": { | |
| "interval": "30s", | |
| "baseEjectionTime": "60s", | |
| "maxEjectionPercent": 70, | |
| "enforcingConsecutive5xx": 0, | |
| "consecutiveGatewayFailure": 10, | |
| "enforcingConsecutiveGatewayFailure": 100 | |
| }, | |
| "commonLbConfig": { | |
| "healthyPanicThreshold": {}, | |
| "localityWeightedLbConfig": {} | |
| }, | |
| "metadata": { | |
| "filterMetadata": { | |
| "istio": { | |
| "config": "/apis/networking/v1alpha3/namespaces/istio-system/destination-rule/thanos.skyscanner.io" | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name": "xds-grpc", | |
| "type": "STRICT_DNS", | |
| "connectTimeout": "10s", | |
| "hosts": [ | |
| { | |
| "socketAddress": { | |
| "address": "istio-pilot.istio-system", | |
| "portValue": 15011 | |
| } | |
| } | |
| ], | |
| "circuitBreakers": { | |
| "thresholds": [ | |
| { | |
| "maxConnections": 100000, | |
| "maxPendingRequests": 100000, | |
| "maxRequests": 100000 | |
| }, | |
| { | |
| "priority": "HIGH", | |
| "maxConnections": 100000, | |
| "maxPendingRequests": 100000, | |
| "maxRequests": 100000 | |
| } | |
| ] | |
| }, | |
| "tlsContext": { | |
| "commonTlsContext": { | |
| "tlsCertificates": [ | |
| { | |
| "certificateChain": { | |
| "filename": "/etc/certs/cert-chain.pem" | |
| }, | |
| "privateKey": { | |
| "filename": "/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validationContext": { | |
| "trustedCa": { | |
| "filename": "/etc/certs/root-cert.pem" | |
| }, | |
| "verifySubjectAltName": [ | |
| "spiffe://cluster.local/ns/istio-system/sa/istio-pilot-service-account" | |
| ] | |
| }, | |
| "alpnProtocols": [ | |
| "h2" | |
| ] | |
| } | |
| }, | |
| "http2ProtocolOptions": {}, | |
| "dnsRefreshRate": "300s", | |
| "dnsLookupFamily": "V4_ONLY", | |
| "upstreamConnectionOptions": { | |
| "tcpKeepalive": { | |
| "keepaliveTime": 300 | |
| } | |
| } | |
| }, | |
| { | |
| "name": "zipkin", | |
| "type": "STRICT_DNS", | |
| "connectTimeout": "1s", | |
| "hosts": [ | |
| { | |
| "socketAddress": { | |
| "address": "zipkin.istio-system", | |
| "portValue": 9411 | |
| } | |
| } | |
| ], | |
| "dnsRefreshRate": "300s", | |
| "dnsLookupFamily": "V4_ONLY" | |
| } | |
| ] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 2020-04-09T22:55:25.621888Z info FLAG: --applicationPorts="[8080]" | |
| 2020-04-09T22:55:25.621934Z info FLAG: --binaryPath="/usr/local/bin/envoy" | |
| 2020-04-09T22:55:25.621943Z info FLAG: --concurrency="2" | |
| 2020-04-09T22:55:25.621950Z info FLAG: --configPath="/etc/istio/proxy" | |
| 2020-04-09T22:55:25.621959Z info FLAG: --connectTimeout="10s" | |
| 2020-04-09T22:55:25.621968Z info FLAG: --controlPlaneAuthPolicy="MUTUAL_TLS" | |
| 2020-04-09T22:55:25.621980Z info FLAG: --controlPlaneBootstrap="true" | |
| 2020-04-09T22:55:25.621992Z info FLAG: --customConfigFile="" | |
| 2020-04-09T22:55:25.622003Z info FLAG: --datadogAgentAddress="" | |
| 2020-04-09T22:55:25.622012Z info FLAG: --disableInternalTelemetry="false" | |
| 2020-04-09T22:55:25.622020Z info FLAG: --discoveryAddress="istio-pilot.istio-system:15011" | |
| 2020-04-09T22:55:25.622028Z info FLAG: --dnsRefreshRate="300s" | |
| 2020-04-09T22:55:25.622036Z info FLAG: --domain="infrabin.svc.cluster.local" | |
| 2020-04-09T22:55:25.622044Z info FLAG: --drainDuration="45s" | |
| 2020-04-09T22:55:25.622052Z info FLAG: --envoyAccessLogService="" | |
| 2020-04-09T22:55:25.622061Z info FLAG: --envoyMetricsService="" | |
| 2020-04-09T22:55:25.622068Z info FLAG: --help="false" | |
| 2020-04-09T22:55:25.622076Z info FLAG: --id="" | |
| 2020-04-09T22:55:25.622083Z info FLAG: --ip="" | |
| 2020-04-09T22:55:25.622090Z info FLAG: --lightstepAccessToken="" | |
| 2020-04-09T22:55:25.622097Z info FLAG: --lightstepAddress="" | |
| 2020-04-09T22:55:25.622104Z info FLAG: --lightstepCacertPath="" | |
| 2020-04-09T22:55:25.622112Z info FLAG: --lightstepSecure="false" | |
| 2020-04-09T22:55:25.622120Z info FLAG: --log_as_json="false" | |
| 2020-04-09T22:55:25.622126Z info FLAG: --log_caller="" | |
| 2020-04-09T22:55:25.622133Z info FLAG: --log_output_level="default:info" | |
| 2020-04-09T22:55:25.622140Z info FLAG: --log_rotate="" | |
| 2020-04-09T22:55:25.622150Z info FLAG: --log_rotate_max_age="30" | |
| 2020-04-09T22:55:25.622161Z info FLAG: --log_rotate_max_backups="1000" | |
| 2020-04-09T22:55:25.622172Z info FLAG: --log_rotate_max_size="104857600" | |
| 2020-04-09T22:55:25.622181Z info FLAG: --log_stacktrace_level="default:none" | |
| 2020-04-09T22:55:25.622195Z info FLAG: --log_target="[stdout]" | |
| 2020-04-09T22:55:25.622208Z info FLAG: --mixerIdentity="" | |
| 2020-04-09T22:55:25.622215Z info FLAG: --parentShutdownDuration="1m0s" | |
| 2020-04-09T22:55:25.622223Z info FLAG: --pilotIdentity="" | |
| 2020-04-09T22:55:25.622235Z info FLAG: --proxyAdminPort="15000" | |
| 2020-04-09T22:55:25.622242Z info FLAG: --proxyComponentLogLevel="misc:error" | |
| 2020-04-09T22:55:25.622250Z info FLAG: --proxyLogLevel="warning" | |
| 2020-04-09T22:55:25.622256Z info FLAG: --serviceCluster="infrabin.infrabin" | |
| 2020-04-09T22:55:25.622263Z info FLAG: --serviceregistry="Kubernetes" | |
| 2020-04-09T22:55:25.622272Z info FLAG: --statsdUdpAddress="" | |
| 2020-04-09T22:55:25.622279Z info FLAG: --statusPort="15020" | |
| 2020-04-09T22:55:25.622286Z info FLAG: --templateFile="" | |
| 2020-04-09T22:55:25.622293Z info FLAG: --trust-domain="" | |
| 2020-04-09T22:55:25.622301Z info FLAG: --zipkinAddress="zipkin.istio-system:9411" | |
| 2020-04-09T22:55:25.622323Z info Version 1.4.3-17f6bfc3d7121ad527c2d617ffc27c758d6a7241-Clean | |
| 2020-04-09T22:55:25.622562Z info Obtained private IP [172.16.204.169] | |
| 2020-04-09T22:55:25.622595Z info Proxy role: &model.Proxy{ClusterID:"", Type:"sidecar", IPAddresses:[]string{"172.16.204.169", "172.16.204.169"}, ID:"infrabin-65547474db-srgth.infrabin", Locality:(*envoy_api_v2_core.Locality)(nil), DNSDomain:"infrabin.svc.cluster.local", ConfigNamespace:"", Metadata:(*model.NodeMetadata)(nil), SidecarScope:(*model.SidecarScope)(nil), MergedGateway:(*model.MergedGateway)(nil), ServiceInstances:[]*model.ServiceInstance(nil), WorkloadLabels:labels.Collection(nil), IstioVersion:(*model.IstioVersion)(nil)} | |
| 2020-04-09T22:55:25.622609Z info PilotSAN []string{"spiffe://cluster.local/ns/istio-system/sa/istio-pilot-service-account"} | |
| 2020-04-09T22:55:25.622618Z info MixerSAN []string{"spiffe://cluster.local/ns/istio-system/sa/istio-mixer-service-account"} | |
| 2020-04-09T22:55:25.624128Z info Effective config: binaryPath: /usr/local/bin/envoy | |
| concurrency: 2 | |
| configPath: /etc/istio/proxy | |
| connectTimeout: 10s | |
| controlPlaneAuthPolicy: MUTUAL_TLS | |
| discoveryAddress: istio-pilot.istio-system:15011 | |
| drainDuration: 45s | |
| envoyAccessLogService: {} | |
| envoyMetricsService: {} | |
| parentShutdownDuration: 60s | |
| proxyAdminPort: 15000 | |
| serviceCluster: infrabin.infrabin | |
| statNameLength: 189 | |
| tracing: | |
| zipkin: | |
| address: zipkin.istio-system:9411 | |
| 2020-04-09T22:55:25.624256Z info Monitored certs: []string{"/etc/certs/root-cert.pem", "/etc/certs/cert-chain.pem", "/etc/certs/key.pem"} | |
| 2020-04-09T22:55:25.624420Z info waiting 2m0s for /etc/certs/root-cert.pem | |
| 2020-04-09T22:55:25.624508Z info waiting 2m0s for /etc/certs/cert-chain.pem | |
| 2020-04-09T22:55:25.624560Z info waiting 2m0s for /etc/certs/key.pem | |
| 2020-04-09T22:55:25.624835Z info PilotSAN []string{"spiffe://cluster.local/ns/istio-system/sa/istio-pilot-service-account"} | |
| 2020-04-09T22:55:25.624861Z info Starting proxy agent | |
| 2020-04-09T22:55:25.624992Z info Opening status port 15020 | |
| 2020-04-09T22:55:25.625110Z info Received new config, creating new Envoy epoch 0 | |
| 2020-04-09T22:55:25.625142Z info Epoch 0 starting | |
| 2020-04-09T22:55:25.625161Z info watching /etc/certs for changes | |
| 2020-04-09T22:55:25.628996Z info Envoy command: [-c /etc/istio/proxy/envoy-rev0.json --restart-epoch 0 --drain-time-s 45 --parent-shutdown-time-s 60 --service-cluster infrabin.infrabin --service-node sidecar~172.16.204.169~infrabin-65547474db-srgth.infrabin~infrabin.svc.cluster.local --max-obj-name-len 189 --local-address-ip-version v4 --log-format [Envoy (Epoch 0)] [%Y-%m-%d %T.%e][%t][%l][%n] %v -l warning --component-log-level misc:error --concurrency 2] | |
| [Envoy (Epoch 0)] [2020-04-09 22:55:25.666][23][warning][config] [bazel-out/k8-opt/bin/external/envoy/source/common/config/_virtual_includes/grpc_stream_lib/common/config/grpc_stream.h:91] gRPC config stream closed: 14, no healthy upstream | |
| [Envoy (Epoch 0)] [2020-04-09 22:55:25.666][23][warning][config] [bazel-out/k8-opt/bin/external/envoy/source/common/config/_virtual_includes/grpc_stream_lib/common/config/grpc_stream.h:54] Unable to establish new stream | |
| 2020-04-09T22:55:27.789008Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:29.788690Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:31.788604Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:33.788757Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:35.788902Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:37.788651Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:39.788624Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:41.788837Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:43.788689Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:45.788528Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:47.788898Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:49.788777Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:51.788668Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:53.788639Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:55.788604Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:57.788633Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:55:59.788830Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:01.788754Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:03.788769Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:05.788846Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:07.788763Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:09.788606Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:11.788831Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:13.788639Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:15.788682Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:17.788837Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:19.788661Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:21.788728Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:23.788773Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:25.788847Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:27.789685Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:29.788874Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:31.788613Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:33.788865Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:35.788726Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:37.788574Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:39.788567Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:41.789204Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:43.788709Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:45.789020Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| 2020-04-09T22:56:47.788949Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:48.993][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C3][S8446073037927789345] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:56:48 GMT' | |
| 'server', 'envoy' | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:48.993][23][debug][connection] [external/envoy/source/common/network/connection_impl.cc:527] [C3] remote close | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:48.993][23][debug][connection] [external/envoy/source/common/network/connection_impl.cc:193] [C3] closing socket: 0 | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:48.993][23][debug][conn_handler] [external/envoy/source/server/connection_handler_impl.cc:88] [C3] adding to cleanup list | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:49.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:49.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S14587651224203085319] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:49.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S14587651224203085319] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:49.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S14587651224203085319] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:49.789][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S14587651224203085319] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:56:49 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:56:49.789234Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:50.733][23][debug][main] [external/envoy/source/server/server.cc:177] flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:50.733][23][debug][main] [external/envoy/source/server/server.cc:187] Envoy is not fully initialized, skipping histogram merge and flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:51.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:51.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S6215380497364532620] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:51.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S6215380497364532620] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:51.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S6215380497364532620] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:51.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S6215380497364532620] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:56:51 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:56:51.788809Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:53.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:53.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S7616626854182290254] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:53.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S7616626854182290254] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:53.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S7616626854182290254] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:53.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S7616626854182290254] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:56:53 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:56:53.788880Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:55.736][23][debug][main] [external/envoy/source/server/server.cc:177] flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:55.736][23][debug][main] [external/envoy/source/server/server.cc:187] Envoy is not fully initialized, skipping histogram merge and flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:55.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:55.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S17293552526150488887] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:55.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S17293552526150488887] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:55.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S17293552526150488887] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:55.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S17293552526150488887] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:56:55 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:56:55.789066Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:57.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:57.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S6189474465386386159] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:57.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S6189474465386386159] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:57.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S6189474465386386159] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:57.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S6189474465386386159] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:56:57 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:56:57.788815Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:59.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:59.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S1033074389130990489] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:59.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S1033074389130990489] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:59.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S1033074389130990489] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:56:59.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S1033074389130990489] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:56:59 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:56:59.789019Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:00.740][23][debug][main] [external/envoy/source/server/server.cc:177] flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:00.740][23][debug][main] [external/envoy/source/server/server.cc:187] Envoy is not fully initialized, skipping histogram merge and flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:01.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:01.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S9967709093520539941] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:01.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S9967709093520539941] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:01.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S9967709093520539941] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:01.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S9967709093520539941] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:01 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:01.788817Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:03.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:03.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S1079333729863987484] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:03.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S1079333729863987484] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:03.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S1079333729863987484] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:03.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S1079333729863987484] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:03 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:03.788875Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:05.744][23][debug][main] [external/envoy/source/server/server.cc:177] flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:05.744][23][debug][main] [external/envoy/source/server/server.cc:187] Envoy is not fully initialized, skipping histogram merge and flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:05.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:05.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S4839628105090392236] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:05.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S4839628105090392236] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:05.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S4839628105090392236] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:05.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S4839628105090392236] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:05 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:05.789005Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:07.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:07.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S16237446092105830216] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:07.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S16237446092105830216] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:07.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S16237446092105830216] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:07.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S16237446092105830216] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:07 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:07.788891Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:09.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:09.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S93006760867452252] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:09.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S93006760867452252] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:09.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S93006760867452252] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:09.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S93006760867452252] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:09 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:09.788786Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:10.748][23][debug][main] [external/envoy/source/server/server.cc:177] flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:10.748][23][debug][main] [external/envoy/source/server/server.cc:187] Envoy is not fully initialized, skipping histogram merge and flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:11.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:11.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S7117626684437352198] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:11.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S7117626684437352198] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:11.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S7117626684437352198] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:11.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S7117626684437352198] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:11 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:11.788725Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:13.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:13.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S7239519808171010204] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:13.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S7239519808171010204] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:13.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S7239519808171010204] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:13.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S7239519808171010204] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:13 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:13.788862Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:15.752][23][debug][main] [external/envoy/source/server/server.cc:177] flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:15.752][23][debug][main] [external/envoy/source/server/server.cc:187] Envoy is not fully initialized, skipping histogram merge and flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:15.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:15.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S16982426873115647849] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:15.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S16982426873115647849] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:15.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S16982426873115647849] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:15.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S16982426873115647849] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:15 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:15.788694Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:17.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:17.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S16534532242558139015] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:17.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S16534532242558139015] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:17.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S16534532242558139015] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:17.789][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S16534532242558139015] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:17 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:17.789195Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:19.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:19.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S10618742412828909254] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:19.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S10618742412828909254] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:19.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S10618742412828909254] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:19.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S10618742412828909254] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:19 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:19.788879Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:20.756][23][debug][main] [external/envoy/source/server/server.cc:177] flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:20.756][23][debug][main] [external/envoy/source/server/server.cc:187] Envoy is not fully initialized, skipping histogram merge and flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:21.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:21.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S17026030606884847765] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:21.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S17026030606884847765] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:21.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S17026030606884847765] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:21.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S17026030606884847765] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:21 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:21.788768Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:23.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:23.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S4876336054188911257] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:23.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S4876336054188911257] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:23.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S4876336054188911257] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:23.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S4876336054188911257] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:23 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:23.788926Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:25.760][23][debug][main] [external/envoy/source/server/server.cc:177] flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:25.760][23][debug][main] [external/envoy/source/server/server.cc:187] Envoy is not fully initialized, skipping histogram merge and flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:25.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:25.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S5263839115823190100] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:25.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S5263839115823190100] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:25.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S5263839115823190100] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:25.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S5263839115823190100] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:25 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:25.788606Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:27.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:27.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S7601916623085588326] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:27.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S7601916623085588326] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:27.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S7601916623085588326] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:27.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S7601916623085588326] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:27 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:27.788985Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:29.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:29.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S8852440953492326517] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:29.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S8852440953492326517] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:29.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S8852440953492326517] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:29.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S8852440953492326517] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:29 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:29.788981Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:30.764][23][debug][main] [external/envoy/source/server/server.cc:177] flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:30.764][23][debug][main] [external/envoy/source/server/server.cc:187] Envoy is not fully initialized, skipping histogram merge and flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:31.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:31.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S15980605273985374158] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:31.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S15980605273985374158] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:31.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S15980605273985374158] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:31.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S15980605273985374158] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:31 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:31.788946Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:33.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:33.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S13200068240334243403] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:33.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S13200068240334243403] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:33.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S13200068240334243403] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:33.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S13200068240334243403] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:33 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:33.788837Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:35.768][23][debug][main] [external/envoy/source/server/server.cc:177] flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:35.768][23][debug][main] [external/envoy/source/server/server.cc:187] Envoy is not fully initialized, skipping histogram merge and flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:35.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:35.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S6498141514452057195] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:35.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S6498141514452057195] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:35.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S6498141514452057195] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:35.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S6498141514452057195] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:35 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:35.788895Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:37.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:37.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S3878749901105294817] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:37.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S3878749901105294817] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:37.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S3878749901105294817] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:37.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S3878749901105294817] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:37 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:37.788817Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:39.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:39.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S18182634950521721055] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:39.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S18182634950521721055] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:39.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S18182634950521721055] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:39.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S18182634950521721055] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:39 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:39.788898Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:40.773][23][debug][main] [external/envoy/source/server/server.cc:177] flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:40.773][23][debug][main] [external/envoy/source/server/server.cc:187] Envoy is not fully initialized, skipping histogram merge and flushing stats | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:41.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:259] [C1] new stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:41.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:708] [C1][S2444867964210372597] request headers complete (end_stream=true): | |
| ':authority', '127.0.0.1:15000' | |
| ':path', '/stats?usedonly' | |
| ':method', 'GET' | |
| 'user-agent', 'Go-http-client/1.1' | |
| 'accept-encoding', 'gzip' | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:41.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1257] [C1][S2444867964210372597] request end stream | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:41.788][23][debug][admin] [external/envoy/source/server/http/admin.cc:1207] [C1][S2444867964210372597] request complete: path: /stats?usedonly | |
| [Envoy (Epoch 0)] [2020-04-09 22:57:41.788][23][debug][http] [external/envoy/source/common/http/conn_manager_impl.cc:1552] [C1][S2444867964210372597] encoding headers via codec (end_stream=false): | |
| ':status', '200' | |
| 'content-type', 'text/plain; charset=UTF-8' | |
| 'cache-control', 'no-cache, max-age=0' | |
| 'x-content-type-options', 'nosniff' | |
| 'date', 'Thu, 09 Apr 2020 22:57:41 GMT' | |
| 'server', 'envoy' | |
| 2020-04-09T22:57:41.788959Z info Envoy proxy is NOT ready: config not received from Pilot (is Pilot running?): cds updates: 1 successful, 0 rejected; lds updates: 0 successful, 0 rejected |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment