cloudfoundry / cf-for-k8s

The open source deployment manifest for Cloud Foundry on Kubernetes
Apache License 2.0
300 stars 115 forks source link

Gateway access logs do not appear in cf log #520

Closed XanderStrike closed 4 years ago

XanderStrike commented 4 years ago

This appears to be a regression of https://www.pivotaltracker.com/n/projects/2407973/stories/173568724

STR:

  1. Deploy a cf-for-k8s
  2. Push an app
  3. Run cf logs <appname>
  4. Curl the app

Expected:

JSON access logs emitted by the ingressgateway appear.

Observed:

No access logs are visible.

Additional context

cf-for-k8s SHA

4aa12672c2727f8886b41baf020c8a97d95385c3

The cf-k8s-networking team has a bug prioritized to fix this, however it may not make it by code freeze tonight: https://www.pivotaltracker.com/story/show/175210582

cf-gitbot commented 4 years ago

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/175210759

The labels on this github issue will be updated when the story is started.

mike1808 commented 4 years ago

I suppose this happened because of the change in Istio 1.7 making gatways to run as non-root which prevent fluent-bit to mount /var/lib/docker/containers folder from the host.

jamespollard8 commented 4 years ago

Fixed by #521