search

hashicorp / consul

Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.
https://www.consul.io
Other
28.31k stars 4.42k forks source link

consul connect ignores envoy_listener_json & envoy_cluster_json in proxy.upstream[].config #6377

Closed skyrocknroll closed 5 years ago

skyrocknroll commented 5 years ago

Consul Version : Consul v1.6.0-beta3 (5ff04a303) os : ubuntu 18.04

curl -v -XGET http://172.31.16.18:8500/v1/agent/service/240ba83a698d-sidecar-proxy | jq

{
  "Kind": "connect-proxy",
  "ID": "240ba83a698d-sidecar-proxy",
  "Service": "goserver-t-sidecar-proxy",
  "Tags": [
    "sidecar"
  ],
  "Meta": null,
  "Port": 27582,
  "Address": "",
  "Weights": {
    "Passing": 1,
    "Warning": 1
  },
  "EnableTagOverride": false,
  "ContentHash": "f063b057025d8ccd",
  "Proxy": {
    "DestinationServiceName": "goserver-t",
    "DestinationServiceID": "_nomad-task-7aa5e8d7-d529-acb1-f0b7-146e64d0e5d1-goserver-t-goserver-t",
    "Config": {
      "envoy_extra_stats_sinks_json": "{\n        \"name\": \"envoy.dog_statsd\",\n\t\t\"config\" : {\n\t\t\t\"address\" : {\n\t\t\t\t\"socket_address\" : \n\t\t\t\t\t{\n\t\t\t\t\t\t\"protocol\" : \"UDP\",\n\t\t\t\t\t\t\"port_value\" : 8125,\n\t\t\t\t\t\t\"address\" : \"172.31.20.6\"\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t}\n\t}\n",
      "envoy_local_cluster_json": "{\n\t\t\t  \"name\": \"inbound\",\n\t\t\t  \"type\": \"STATIC\",\n\t\t\t  \"connect_timeout\": \"90s\",\n\t\t\t  \n\t\t\t  \"lb_policy\": \"ROUND_ROBIN\",\n\t\t\t  \"load_assignment\": {\n\t\t\t\t\"cluster_name\": \"inbound\",\n\t\t\t\t\"endpoints\": [\n\t\t\t\t  {\n\t\t\t\t\t\"lb_endpoints\": [\n\t\t\t\t\t  {\n\t\t\t\t\t\t\"endpoint\": {\n\t\t\t\t\t\t  \"address\": {\n\t\t\t\t\t\t\t\"socket_address\": {\n\t\t\t\t\t\t\t  \"address\": \"127.0.0.1\",\n\t\t\t\t\t\t\t  \"port_value\": \"8181\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t  }\n\t\t\t\t\t\t}\n\t\t\t\t\t  }\n\t\t\t\t\t]\n\t\t\t\t  }\n\t\t\t\t]\n\t\t\t  },\n\t\t\t  \"circuit_breakers\": {\n\t\t\t\t\"thresholds\": [\n\t\t\t\t  {\n\t\t\t\t\t\"priority\": \"DEFAULT\",\n\t\t\t\t\t\"max_connections\": 1024,\n\t\t\t\t\t\"max_pending_requests\": 1024,\n\t\t\t\t\t\"max_requests\": 1024,\n\t\t\t\t\t\"max_retries\": 3\n\t\t\t\t  }\n\t\t\t\t]\n\t\t\t  }\n\t\t\t}",
      "envoy_public_listener_json": "{\n\t\t\t\t\"name\": \"inbound\",\n\t\t\t\t\"address\": {\n\t\t\t\t  \"socket_address\": {\n\t\t\t\t\t\"address\": \"0.0.0.0\",\n\t\t\t\t\t\"port_value\": 27582\n\t\t\t\t  }\n\t\t\t\t},\n\t\t\t\t\"filter_chains\": [\n\t\t\t\t  {\n\t\t\t\t\t\"filters\": [\n\t\t\t\t\t  {\n\t\t\t\t\t\t\"name\": \"envoy.http_connection_manager\",\n\t\t\t\t\t\t\"config\": {\n\t\t\t\t\t\t  \"route_config\": {\n\t\t\t\t\t\t\t\"name\": \"wildcard\",\n\t\t\t\t\t\t\t\"virtual_hosts\": [\n\t\t\t\t\t\t\t  {\n\t\t\t\t\t\t\t\t\"name\": \"backend\",\n\t\t\t\t\t\t\t\t\"routes\": [\n\t\t\t\t\t\t\t\t  {\n\t\t\t\t\t\t\t\t\t\"route\": {\n\t\t\t\t\t\t\t\t\t  \"cluster\": \"inbound\",\n\t\t\t\t\t\t\t\t\t  \"timeout\": \"90s\",\n\t\t\t\t\t\t\t\t\t  \"retry_policy\": {\n\t\t\t\t\t\t\t\t\t\t\t\"retry_on\": \"5xx,connect-failure\",\n\t\t\t\t\t\t\t\t\t\t\t\"num_retries\" : 2,\n\t\t\t\t\t\t\t\t\t\t\t\"per_try_timeout\" : \"60s\"\n\t\t\t\t\t\t\t\t\t  }\n\t\t\t\t\t\t\t\t\t  \n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"match\": {\n\t\t\t\t\t\t\t\t\t  \"prefix\": \"/\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t  }\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\"domains\": [\n\t\t\t\t\t\t\t\t  \"*\"\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t  }\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t  },\n\t\t\t\t\t\t  \"tracing\": {\n\t\t\t\t\t\t\t\"random_sampling\": {}\n\t\t\t\t\t\t  },\n\t\t\t\t\t\t  \"http_filters\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t  \"name\": \"envoy.router\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t  ],\n\t\t\t\t\t\t  \"stat_prefix\": \"ingress_http\",\n\t\t\t\t\t\t  \"access_log\": {\n\t\t\t\t\t\t\t\"name\": \"envoy.file_access_log\",\n\t\t\t\t\t\t\t\"config\": {\n\t\t\t\t\t\t\t  \"path\": \"/var/log/envoy-access/inbound-goserver-t.log\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t  },\n\t\t\t\t\t\t  \"codec_type\": \"AUTO\"\n\t\t\t\t\t\t}\n\t\t\t\t\t  }\n\t\t\t\t\t]\n\t\t\t\t  }\n\t\t\t\t]\n\t\t\t  }\n\t\t\t",
      "envoy_stats_config_json": "{\n          \"stats_tags\": [\n\t\t\t{\n              \"tag_name\": \"nomad-task-name\",\n              \"fixed_value\": \"goserver-t\"\n            },\n            {\n              \"tag_name\": \"host-machine\",\n              \"fixed_value\": \"<no value>\"\n            },\n            {\n              \"tag_name\": \"team-name\",\n              \"fixed_value\": \"<no value>\"\n            }\n          ]\n        }\n",
      "envoy_stats_flush_interval": "10s"
    },
    "Upstreams": [
      {
        "DestinationType": "service",
        "DestinationName": "hawkeye-service",
        "Config": {
          "envoy_cluster_json": "{\n\t\t\t  \"name\" : \"hawkeye-service\",\n\t\t\t  \"type\": \"EDS\",\n              \"eds_cluster_config\": {\n              \t\"eds_config\": {\n                \t\"ads\": {}\n              \t}\n               },\n\t\t\t  \"connect_timeout\": \"90s\",\n\t\t\t  \"lb_policy\": \"ROUND_ROBIN\",\n  \t\t\t  \n\t\t\t  \"circuit_breakers\": {\n\t\t\t\t\"thresholds\": [\n\t\t\t\t  {\n\t\t\t\t\t\"priority\": \"DEFAULT\",\n\t\t\t\t\t\"max_connections\": 1024,\n\t\t\t\t\t\"max_pending_requests\": 1024,\n\t\t\t\t\t\"max_requests\": 1024,\n\t\t\t\t\t\"max_retries\": 3\n\t\t\t\t  }\n\t\t\t\t]\n\t\t\t  }\n\t\t\t}",
          "envoy_listener_json": "{\n\t\t\t\t\"name\" : \"hawkeye-service\",\n\t\t\t\t\"address\": {\n\t\t\t\t  \"socket_address\": {\n\t\t\t\t\t\"address\": \"0.0.0.0\",\n\t\t\t\t\t\"port_value\": 14000\n\t\t\t\t  }\n\t\t\t\t},\n\t\t\t\t\"filter_chains\": [\n\t\t\t\t  {\n\t\t\t\t\t\"filters\": [\n\t\t\t\t\t  {\n\t\t\t\t\t\t\"name\": \"envoy.http_connection_manager\",\n\t\t\t\t\t\t\"config\": {\n\t\t\t\t\t\t  \"route_config\": {\n\t\t\t\t\t\t\t\"name\": \"hawkeye-service\",\n\t\t\t\t\t\t\t\"virtual_hosts\": [\n\t\t\t\t\t\t\t  {\n\t\t\t\t\t\t\t\t\"name\": \"hawkeye-service\",\n\t\t\t\t\t\t\t\t\"routes\": [\n\t\t\t\t\t\t\t\t  {\n\t\t\t\t\t\t\t\t\t\"route\": {\n\t\t\t\t\t\t\t\t\t  \"cluster\" : \"hawkeye-service\",\n\t\t\t\t\t\t\t\t\t  \"timeout\": \"90s\",\n\t\t\t\t\t\t\t\t\t  \"retry_policy\": {\n\t\t\t\t\t\t\t\t\t\t\t\"retry_on\": \"5xx,connect-failure\",\n\t\t\t\t\t\t\t\t\t\t\t\"num_retries\" : 2,\n\t\t\t\t\t\t\t\t\t\t\t\"per_try_timeout\" : \"60s\"\n\t\t\t\t\t\t\t\t\t  }\n\t\t\t\t\t\t\t\t\t  \n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"match\": {\n\t\t\t\t\t\t\t\t\t  \"prefix\": \"/\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t  }\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\"domains\": [\n\t\t\t\t\t\t\t\t  \"*\"\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t  }\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t  },\n\t\t\t\t\t\t  \"tracing\": {\n\t\t\t\t\t\t\t\"random_sampling\": {},\n\t\t\t\t\t\t\t\"operation_name\": \"EGRESS\"\n\t\t\t\t\t\t  },\n\t\t\t\t\t\t  \"http_filters\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t  \"name\": \"envoy.router\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t  ],\n\t\t\t\t\t\t  \"stat_prefix\": \"hawkeye-service\",\n\t\t\t\t\t\t  \"access_log\": {\n\t\t\t\t\t\t\t\"name\": \"envoy.file_access_log\",\n\t\t\t\t\t\t\t\"config\": {\n\t\t\t\t\t\t\t  \"path\": \"/var/log/envoy-access/hawkeye-service.log\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t  },\n\t\t\t\t\t\t  \"codec_type\": \"AUTO\"\n\t\t\t\t\t\t}\n\t\t\t\t\t  }\n\t\t\t\t\t]\n\t\t\t\t  }\n\t\t\t\t]\n\t\t\t  }\n\t\t\t"
        },
        "MeshGateway": {
          "Mode": ""
        }
      }
    ],
    "MeshGateway": {
      "Mode": ""
    }
  }
}

curl http://localhost:19000/config_dump | jq

{
  "configs": [
    {
      "@type": "type.googleapis.com/envoy.admin.v2alpha.BootstrapConfigDump",
      "bootstrap": {
        "node": {
          "id": "240ba83a698d-sidecar-proxy",
          "cluster": "goserver-t",
          "build_version": "e95ef6bc43daeda16451ad4ef20979d8e07a5299/1.10.0/clean-getenvoy-88b3e02/RELEASE/BoringSSL"
        },
        "static_resources": {
          "clusters": [
            {
              "name": "local_agent",
              "type": "STATIC",
              "connect_timeout": "1s",
              "hosts": [
                {
                  "socket_address": {
                    "address": "172.31.20.6",
                    "port_value": 8502
                  }
                }
              ],
              "http2_protocol_options": {}
            }
          ]
        },
        "dynamic_resources": {
          "lds_config": {
            "ads": {}
          },
          "cds_config": {
            "ads": {}
          },
          "ads_config": {
            "api_type": "GRPC",
            "grpc_services": [
              {
                "envoy_grpc": {
                  "cluster_name": "local_agent"
                },
                "initial_metadata": [
                  {
                    "key": "x-consul-token"
                  }
                ]
              }
            ]
          }
        },
        "stats_sinks": [
          {
            "name": "envoy.dog_statsd",
            "config": {
              "address": {
                "socket_address": {
                  "port_value": 8125,
                  "protocol": "UDP",
                  "address": "172.31.20.6"
                }
              }
            }
          }
        ],
        "stats_flush_interval": "10s",
        "admin": {
          "access_log_path": "/dev/null",
          "address": {
            "socket_address": {
              "address": "127.0.0.1",
              "port_value": 19000
            }
          }
        },
        "stats_config": {
          "stats_tags": [
            {
              "tag_name": "nomad-task-name",
              "fixed_value": "goserver-t"
            },
            {
              "tag_name": "host-machine",
              "fixed_value": "<no value>"
            },
            {
              "tag_name": "team-name",
              "fixed_value": "<no value>"
            }
          ]
        }
      },
      "last_updated": "2019-08-22T15:49:50.928Z"
    },
    {
      "@type": "type.googleapis.com/envoy.admin.v2alpha.ClustersConfigDump",
      "version_info": "00000001",
      "static_clusters": [
        {
          "cluster": {
            "name": "local_agent",
            "type": "STATIC",
            "connect_timeout": "1s",
            "hosts": [
              {
                "socket_address": {
                  "address": "172.31.20.6",
                  "port_value": 8502
                }
              }
            ],
            "http2_protocol_options": {}
          },
          "last_updated": "2019-08-22T15:49:50.930Z"
        }
      ],
      "dynamic_active_clusters": [
        {
          "version_info": "00000001",
          "cluster": {
            "name": "hawkeye-service.default.us-east-1d.internal.5ecdd36a-e2ab-f1c5-b37b-f05a78cd837b.consul",
            "type": "EDS",
            "eds_cluster_config": {
              "eds_config": {
                "ads": {}
              }
            },
            "connect_timeout": "5s",
            "tls_context": {
              "common_tls_context": {
                "tls_params": {},
                "tls_certificates": [
                  {
                    "certificate_chain": {
                      "inline_string": "-----BEGIN CERTIFICATE-----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\n+YyRyP8LDg==\n-----END CERTIFICATE-----\n"
                    },
                    "private_key": {
                      "inline_string": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEWEiJspuDO75FjV+n0R/6JZWO36rVN7luZMzWS8+sRMoAoGCCqGSM49\nAwEHoUQDQgAE/OKArnFPLcTsP78rocFNBrkfjG9ofJHZgktSA0E2HMKLnImX7/ob\nedvUxVZKOvHet2zL27tGvG16u8ra39SqOQ==\n-----END EC PRIVATE KEY-----\n"
                    }
                  }
                ],
                "validation_context": {
                  "trusted_ca": {
                    "inline_string": "-----BEGIN CERTIFICATE-----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\nGlfirynYAiAgQ5XnxFHjWCAY7kC0TWoL2/VfW9sllgLsKq88KuAtaw==\n-----END CERTIFICATE-----\n"
                  }
                }
              },
              "sni": "hawkeye-service.default.us-east-1d.internal.5ecdd36a-e2ab-f1c5-b37b-f05a78cd837b.consul"
            },
            "outlier_detection": {},
            "common_lb_config": {
              "healthy_panic_threshold": {}
            },
            "alt_stat_name": "hawkeye-service.default.us-east-1d.internal.5ecdd36a-e2ab-f1c5-b37b-f05a78cd837b.consul"
          },
          "last_updated": "2019-08-22T15:49:50.938Z"
        },
        {
          "version_info": "00000001",
          "cluster": {
            "name": "inbound",
            "type": "STATIC",
            "connect_timeout": "90s",
            "circuit_breakers": {
              "thresholds": [
                {
                  "max_connections": 1024,
                  "max_pending_requests": 1024,
                  "max_requests": 1024,
                  "max_retries": 3
                }
              ]
            },
            "load_assignment": {
              "cluster_name": "inbound",
              "endpoints": [
                {
                  "lb_endpoints": [
                    {
                      "endpoint": {
                        "address": {
                          "socket_address": {
                            "address": "127.0.0.1",
                            "port_value": 8181
                          }
                        }
                      }
                    }
                  ]
                }
              ]
            }
          },
          "last_updated": "2019-08-22T15:49:50.937Z"
        }
      ]
    },
    {
      "@type": "type.googleapis.com/envoy.admin.v2alpha.ListenersConfigDump",
      "version_info": "00000001",
      "dynamic_active_listeners": [
        {
          "version_info": "00000001",
          "listener": {
            "name": "inbound",
            "address": {
              "socket_address": {
                "address": "0.0.0.0",
                "port_value": 27582
              }
            },
            "filter_chains": [
              {
                "tls_context": {
                  "common_tls_context": {
                    "tls_params": {},
                    "tls_certificates": [
                      {
                        "certificate_chain": {
                          "inline_string": "-----BEGIN CERTIFICATE-----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\n+YyRyP8LDg==\n-----END CERTIFICATE-----\n"
                        },
                        "private_key": {
                          "inline_string": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEWEiJspuDO75FjV+n0R/6JZWO36rVN7luZMzWS8+sRMoAoGCCqGSM49\nAwEHoUQDQgAE/OKArnFPLcTsP78rocFNBrkfjG9ofJHZgktSA0E2HMKLnImX7/ob\nedvUxVZKOvHet2zL27tGvG16u8ra39SqOQ==\n-----END EC PRIVATE KEY-----\n"
                        }
                      }
                    ],
                    "validation_context": {
                      "trusted_ca": {
                        "inline_string": "-----BEGIN CERTIFICATE-----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\nGlfirynYAiAgQ5XnxFHjWCAY7kC0TWoL2/VfW9sllgLsKq88KuAtaw==\n-----END CERTIFICATE-----\n"
                      }
                    }
                  },
                  "require_client_certificate": true
                },
                "filters": [
                  {
                    "name": "envoy.ext_authz",
                    "config": {
                      "grpc_service": {
                        "initial_metadata": [
                          {
                            "key": "x-consul-token"
                          }
                        ],
                        "envoy_grpc": {
                          "cluster_name": "local_agent"
                        }
                      },
                      "stat_prefix": "connect_authz"
                    }
                  },
                  {
                    "name": "envoy.http_connection_manager",
                    "config": {
                      "access_log": {
                        "name": "envoy.file_access_log",
                        "config": {
                          "path": "/var/log/envoy-access/inbound-goserver-t.log"
                        }
                      },
                      "http_filters": [
                        {
                          "name": "envoy.router"
                        }
                      ],
                      "route_config": {
                        "name": "wildcard",
                        "virtual_hosts": [
                          {
                            "routes": [
                              {
                                "match": {
                                  "prefix": "/"
                                },
                                "route": {
                                  "cluster": "inbound",
                                  "timeout": "90s",
                                  "retry_policy": {
                                    "retry_on": "5xx,connect-failure",
                                    "per_try_timeout": "60s",
                                    "num_retries": 2
                                  }
                                }
                              }
                            ],
                            "domains": [
                              "*"
                            ],
                            "name": "backend"
                          }
                        ]
                      },
                      "tracing": {
                        "random_sampling": {}
                      },
                      "codec_type": "AUTO",
                      "stat_prefix": "ingress_http"
                    }
                  }
                ]
              }
            ]
          },
          "last_updated": "2019-08-22T15:49:50.943Z"
        }
      ]
    },
    {
      "@type": "type.googleapis.com/envoy.admin.v2alpha.RoutesConfigDump",
      "static_route_configs": [
        {
          "route_config": {
            "name": "wildcard",
            "virtual_hosts": [
              {
                "name": "backend",
                "domains": [
                  "*"
                ],
                "routes": [
                  {
                    "match": {
                      "prefix": "/"
                    },
                    "route": {
                      "cluster": "inbound",
                      "timeout": "90s",
                      "retry_policy": {
                        "retry_on": "5xx,connect-failure",
                        "num_retries": 2,
                        "per_try_timeout": "60s"
                      }
                    }
                  }
                ]
              }
            ]
          },
          "last_updated": "2019-08-22T15:49:50.942Z"
        }
      ]
    }
  ]
}

Launching the sidecar

consul connect envoy -http-addr=${CONSUL_RPC_ADDR} -sidecar-for=_nomad-task-${NOMAD_ALLOC_ID}-${NOMAD_TASK_NAME}-${NOMAD_TASK_NAME} -grpc-addr=${HOST_MACHINE_NAME}:8502

[2019-08-22 15:49:50.900][405][info][main] [external/envoy/source/server/server.cc:205] initializing epoch 0 (hot restart version=disabled)
[2019-08-22 15:49:50.901][405][info][main] [external/envoy/source/server/server.cc:207] statically linked extensions:
[2019-08-22 15:49:50.901][405][info][main] [external/envoy/source/server/server.cc:209]   access_loggers: envoy.file_access_log,envoy.http_grpc_access_log
[2019-08-22 15:49:50.902][405][info][main] [external/envoy/source/server/server.cc:212]   filters.http: envoy.buffer,envoy.cors,envoy.ext_authz,envoy.fault,envoy.filters.http.grpc_http1_reverse_bridge,envoy.filters.http.header_to_metadata,envoy.filters.http.jwt_authn,envoy.filters.http.rbac,envoy.filters.http.tap,envoy.grpc_http1_bridge,envoy.grpc_json_transcoder,envoy.grpc_web,envoy.gzip,envoy.health_check,envoy.http_dynamo_filter,envoy.ip_tagging,envoy.lua,envoy.rate_limit,envoy.router,envoy.squash
[2019-08-22 15:49:50.902][405][info][main] [external/envoy/source/server/server.cc:215]   filters.listener: envoy.listener.original_dst,envoy.listener.original_src,envoy.listener.proxy_protocol,envoy.listener.tls_inspector
[2019-08-22 15:49:50.902][405][info][main] [external/envoy/source/server/server.cc:218]   filters.network: envoy.client_ssl_auth,envoy.echo,envoy.ext_authz,envoy.filters.network.dubbo_proxy,envoy.filters.network.mysql_proxy,envoy.filters.network.rbac,envoy.filters.network.sni_cluster,envoy.filters.network.thrift_proxy,envoy.filters.network.zookeeper_proxy,envoy.http_connection_manager,envoy.mongo_proxy,envoy.ratelimit,envoy.redis_proxy,envoy.tcp_proxy
[2019-08-22 15:49:50.902][405][info][main] [external/envoy/source/server/server.cc:220]   stat_sinks: envoy.dog_statsd,envoy.metrics_service,envoy.stat_sinks.hystrix,envoy.statsd
[2019-08-22 15:49:50.902][405][info][main] [external/envoy/source/server/server.cc:222]   tracers: envoy.dynamic.ot,envoy.lightstep,envoy.tracers.datadog,envoy.zipkin
[2019-08-22 15:49:50.902][405][info][main] [external/envoy/source/server/server.cc:225]   transport_sockets.downstream: envoy.transport_sockets.alts,envoy.transport_sockets.tap,raw_buffer,tls
[2019-08-22 15:49:50.902][405][info][main] [external/envoy/source/server/server.cc:228]   transport_sockets.upstream: envoy.transport_sockets.alts,envoy.transport_sockets.tap,raw_buffer,tls
[2019-08-22 15:49:50.902][405][info][main] [external/envoy/source/server/server.cc:234] buffer implementation: old (libevent)
[2019-08-22 15:49:50.928][405][warning][misc] [external/envoy/source/common/protobuf/utility.cc:173] Using deprecated option 'envoy.api.v2.Cluster.hosts' from file cds.proto. This configuration will be removed from Envoy soon. Please see https://github.com/envoyproxy/envoy/blob/master/DEPRECATED.md for details.
[2019-08-22 15:49:50.929][405][info][main] [external/envoy/source/server/server.cc:281] admin address: 127.0.0.1:19000
[2019-08-22 15:49:50.930][405][info][config] [external/envoy/source/server/configuration_impl.cc:50] loading 0 static secret(s)
[2019-08-22 15:49:50.930][405][info][config] [external/envoy/source/server/configuration_impl.cc:56] loading 1 cluster(s)
[2019-08-22 15:49:50.931][405][info][upstream] [external/envoy/source/common/upstream/cluster_manager_impl.cc:133] cm init: initializing cds
[2019-08-22 15:49:50.932][405][info][config] [external/envoy/source/server/configuration_impl.cc:60] loading 0 listener(s)
[2019-08-22 15:49:50.932][405][info][config] [external/envoy/source/server/configuration_impl.cc:85] loading tracing configuration
[2019-08-22 15:49:50.932][405][info][config] [external/envoy/source/server/configuration_impl.cc:105] loading stats sink configuration
[2019-08-22 15:49:50.932][405][info][main] [external/envoy/source/server/server.cc:478] starting main dispatch loop
[2019-08-22 15:49:50.937][405][info][upstream] [external/envoy/source/common/upstream/cluster_manager_impl.cc:477] add/update cluster inbound during init
[2019-08-22 15:49:50.938][405][info][upstream] [external/envoy/source/common/upstream/cluster_manager_impl.cc:477] add/update cluster hawkeye-service.default.us-east-1d.internal.5ecdd36a-e2ab-f1c5-b37b-f05a78cd837b.consul during init
[2019-08-22 15:49:50.938][405][info][upstream] [external/envoy/source/common/upstream/cluster_manager_impl.cc:113] cm init: initializing secondary clusters
[2019-08-22 15:49:50.938][405][info][upstream] [external/envoy/source/common/upstream/cluster_manager_impl.cc:137] cm init: all clusters initialized
[2019-08-22 15:49:50.938][405][info][main] [external/envoy/source/server/server.cc:462] all clusters initialized. initializing init manager
[2019-08-22 15:49:50.943][405][info][upstream] [external/envoy/source/server/lds_api.cc:74] lds: add/update listener 'inbound'
[2019-08-22 15:49:50.944][405][info][config] [external/envoy/source/server/listener_manager_impl.cc:1006] all dependencies initialized. starting workers
[2019-08-22 15:49:50.944][405][warning][config] [bazel-out/k8-opt/bin/external/envoy/source/common/config/_virtual_includes/grpc_mux_subscription_lib/common/config/grpc_mux_subscription_impl.h:77] gRPC config for type.googleapis.com/envoy.api.v2.Listener rejected: Error adding/updating listener(s) hawkeye-service: route: unknown cluster 'hawkeye-service'

Is it possible to override the cluster name in listener and cluster using envoy_listener_json and envoy_cluster_json I am trying to override the following in the listener

  "stat_prefix": "{{.CONSUL_SERVICE_NAME}}",
                          "access_log": {
                            "name": "envoy.file_access_log",
                            "config": {
                              "path": "/var/log/envoy-access/{{.CONSUL_SERVICE_NAME}}.log"
                            }
                          },

and 

  "stat_prefix": "{{.CONSUL_SERVICE_NAME}}",
                          "access_log": {
                            "name": "envoy.file_access_log",
                            "config": {
                              "path": "/var/log/envoy-access/{{.CONSUL_SERVICE_NAME}}.log"
                            }
                          },

Any help would be highly appreciated

rboyer commented 5 years ago

Have you created any service-router, service-splitter, or service-resolver config entries for this service? Those two escape hatches are incompatible with the new L7 stuff at this time: https://github.com/hashicorp/consul/pull/6350

skyrocknroll commented 5 years ago

@rboyer no. I have not created any of those

rboyer commented 5 years ago

This is a bug being fixed in #6378