search

istio / istio.io

Source for the istio.io site
https://istio.io/
Apache License 2.0
762 stars 1.53k forks source link

No description of how humans should parse the diagnostic instructions here: https://preliminary.istio.io/docs/ops/diagnostic-tools/istioctl/#get-proxy-configuration #7148

Closed sdake closed 3 months ago

sdake commented 4 years ago

One may argue - why have diagnostic commands if they are not clear?

sdake@beast-01:~/ms-demo/microservices-demo$ istioctl version
client version: 1.6.0-alpha.2
control plane version: 1.6.0-alpha.2
data plane version: 1.6.0-alpha.2 (14 proxies)
sdake@beast-01:~/ms-demo/microservices-demo$ istioctl proxy-status
NAME                                                   CDS        LDS        EDS        RDS        PILOT                       VERSION
adservice-7977bb55-hb5rg.default                       SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
cartservice-bdfbcb9fd-fdpt5.default                    SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
checkoutservice-cfb8cf9c-4z76c.default                 SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
currencyservice-7fdcf76987-nl44w.default               SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
emailservice-788887c87c-mzsgn.default                  SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
frontend-7ccb56cff9-2dnbh.default                      SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
istio-ingressgateway-7556ff956d-zj467.istio-system     SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
loadgenerator-785f799b57-ljmd4.default                 SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
paymentservice-5f956c56c7-qqmtj.default                SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
productcatalogservice-c87988cd9-h97f2.default          SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
prometheus-586b9485df-b4k9h.istio-system               SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
recommendationservice-d5fcffbf5-l47jt.default          SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
redis-cart-5f59546cdd-txrc6.default                    SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
shippingservice-5b787949b9-l59lj.default               SYNCED     SYNCED     SYNCED     SYNCED     istiod-6c98bcd98d-mplwl     1.6.0-alpha.2
sdake@beast-01:~/ms-demo/microservices-demo$ istioctl proxy-config cartservice-bdfbcb9fd-fdpt5.default
A group of commands used to retrieve information about proxy configuration from the Envoy config dump

Usage:
  istioctl proxy-config [command]

Aliases:
  proxy-config, pc

Examples:
  # Retrieve information about proxy configuration from an Envoy instance.
  istioctl proxy-config <clusters|listeners|routes|endpoints|bootstrap> <pod-name[.namespace]>

Available Commands:
  bootstrap   Retrieves bootstrap configuration for the Envoy in the specified pod
  cluster     Retrieves cluster configuration for the Envoy in the specified pod
  endpoint    Retrieves endpoint configuration for the Envoy in the specified pod
  listener    Retrieves listener configuration for the Envoy in the specified pod
  log         (experimental) Retrieves logging levels of the Envoy in the specified pod
  route       Retrieves route configuration for the Envoy in the specified pod
  secret      (experimental) Retrieves secret configuration for the Envoy in the specified pod

Flags:
  -h, --help            help for proxy-config
  -o, --output string   Output format: one of json|short (default "short")

Global Flags:
      --context string          The name of the kubeconfig context to use
  -i, --istioNamespace string   Istio system namespace (default "istio-system")
  -c, --kubeconfig string       Kubernetes configuration file
  -n, --namespace string        Config namespace

Use "istioctl proxy-config [command] --help" for more information about a command.
sdake@beast-01:~/ms-demo/microservices-demo$ istioctl proxy-config cluster cartservice-bdfbcb9fd-fdpt5.default
SERVICE FQDN                                            PORT      SUBSET         DIRECTION     TYPE
*.googleapis.com                                        80        -              outbound      ORIGINAL_DST
*.googleapis.com                                        443       -              outbound      ORIGINAL_DST
BlackHoleCluster                                        -         -              -             STATIC
InboundPassthroughClusterIpv4                           -         -              -             ORIGINAL_DST
PassthroughCluster                                      -         -              -             ORIGINAL_DST
accounts.google.com                                     80        -              outbound      ORIGINAL_DST
accounts.google.com                                     443       -              outbound      ORIGINAL_DST
adservice.default.svc.cluster.local                     9555      -              outbound      EDS
agent                                                   -         -              -             STATIC
cartservice.default.svc.cluster.local                   7070      -              outbound      EDS
cartservice.default.svc.cluster.local                   7070      grpc           inbound       STATIC
checkoutservice.default.svc.cluster.local               5050      -              outbound      EDS
currencyservice.default.svc.cluster.local               7000      -              outbound      EDS
emailservice.default.svc.cluster.local                  5000      -              outbound      EDS
frontend-external.default.svc.cluster.local             80        -              outbound      EDS
frontend.default.svc.cluster.local                      80        -              outbound      EDS
istio-ingressgateway.istio-system.svc.cluster.local     80        -              outbound      EDS
istio-ingressgateway.istio-system.svc.cluster.local     443       -              outbound      EDS
istio-ingressgateway.istio-system.svc.cluster.local     15020     -              outbound      EDS
istio-ingressgateway.istio-system.svc.cluster.local     15443     -              outbound      EDS
istiod.istio-system.svc.cluster.local                   443       -              outbound      EDS
istiod.istio-system.svc.cluster.local                   853       -              outbound      EDS
istiod.istio-system.svc.cluster.local                   15010     -              outbound      EDS
istiod.istio-system.svc.cluster.local                   15012     -              outbound      EDS
istiod.istio-system.svc.cluster.local                   15014     -              outbound      EDS
kube-dns.kube-system.svc.cluster.local                  53        -              outbound      EDS
kube-dns.kube-system.svc.cluster.local                  9153      -              outbound      EDS
kubernetes.default.svc.cluster.local                    443       -              outbound      EDS
metadata.google.internal                                80        -              outbound      ORIGINAL_DST
metadata.google.internal                                443       -              outbound      ORIGINAL_DST
mgmtCluster                                             15090     mgmt-15090     inbound       STATIC
paymentservice.default.svc.cluster.local                50051     -              outbound      EDS
productcatalogservice.default.svc.cluster.local         3550      -              outbound      EDS
prometheus.istio-system.svc.cluster.local               9090      -              outbound      EDS
prometheus_stats                                        -         -              -             STATIC
recommendationservice.default.svc.cluster.local         8080      -              outbound      EDS
redis-cart.default.svc.cluster.local                    6379      -              outbound      EDS
sds-grpc                                                -         -              -             STATIC
shippingservice.default.svc.cluster.local               50051     -              outbound      EDS
xds-grpc                                                -         -              -             STRICT_DNS
zipkin                                                  -         -              -             STRICT_DNS
sdake@beast-01:~/ms-demo/microservices-demo$ istioctl proxy-config bootstrap cartservice-bdfbcb9fd-fdpt5.default
{
    "bootstrap": {
        "node": {
            "id": "sidecar~192.168.102.158~cartservice-bdfbcb9fd-fdpt5.default~default.svc.cluster.local",
            "cluster": "cartservice.default",
            "metadata": {
                    "APP_CONTAINERS": "[\n    server\n]",
                    "CLUSTER_ID": "Kubernetes",
                    "CONFIG_NAMESPACE": "default",
                    "EXCHANGE_KEYS": "NAME,NAMESPACE,INSTANCE_IPS,LABELS,OWNER,PLATFORM_METADATA,WORKLOAD_NAME,MESH_ID,SERVICE_ACCOUNT,CLUSTER_ID",
                    "INSTANCE_IPS": "192.168.102.158",
                    "INTERCEPTION_MODE": "REDIRECT",
                    "ISTIO_PROXY_SHA": "istio-proxy:b2080ee197a0586dcc6613f60b35882315f8e1db",
                    "ISTIO_VERSION": "1.6.0-alpha.2",
                    "LABELS": {
                                "app": "cartservice",
                                "istio.io/rev": "default",
                                "pod-template-hash": "bdfbcb9fd",
                                "security.istio.io/tlsMode": "istio",
                                "service.istio.io/canonical-name": "cartservice",
                                "service.istio.io/canonical-revision": "latest"
                            },
                    "MESH_ID": "cluster.local",
                    "NAME": "cartservice-bdfbcb9fd-fdpt5",
                    "NAMESPACE": "default",
                    "OWNER": "kubernetes://apis/apps/v1/namespaces/default/deployments/cartservice",
                    "POD_PORTS": "[{\"containerPort\":7070,\"protocol\":\"TCP\"}]",
                    "PROXY_CONFIG": {
                                "binaryPath": "/usr/local/bin/envoy",
                                "concurrency": 2,
                                "configPath": "/etc/istio/proxy",
                                "controlPlaneAuthPolicy": "MUTUAL_TLS",
                                "discoveryAddress": "istiod.istio-system.svc:15012",
                                "drainDuration": "45s",
                                "envoyAccessLogService": {
                                        },
                                "envoyMetricsService": {
                                        },
                                "parentShutdownDuration": "60s",
                                "proxyAdminPort": 15000,
                                "proxyMetadata": {
                                            "DNS_AGENT": ""
                                        },
                                "serviceCluster": "cartservice.default",
                                "statNameLength": 189,
                                "statusPort": 15020,
                                "tracing": {
                                            "zipkin": {
                                                        "address": "zipkin.istio-system:9411"
                                                    }
                                        }
                            },
                    "SDS": "true",
                    "SERVICE_ACCOUNT": "default",
                    "TRUSTJWT": "true",
                    "WORKLOAD_NAME": "cartservice"
                },
            "locality": {

            },
            "hiddenEnvoyDeprecatedBuildVersion": "b2080ee197a0586dcc6613f60b35882315f8e1db/1.14.0-dev/Clean/RELEASE/BoringSSL",
            "userAgentName": "envoy",
            "userAgentBuildVersion": {
                "version": {
                    "majorNumber": 1,
                    "minorNumber": 14
                },
                "metadata": {
                        "build.label": "dev",
                        "build.type": "RELEASE",
                        "revision.sha": "b2080ee197a0586dcc6613f60b35882315f8e1db",
                        "revision.status": "Clean",
                        "ssl.version": "BoringSSL"
                    }
            },
            "extensions": [
                {
                    "name": "envoy.filters.thrift.rate_limit",
                    "category": "envoy.thrift_proxy.filters"
                },
                {
                    "name": "envoy.filters.thrift.router",
                    "category": "envoy.thrift_proxy.filters"
                },
                {
                    "name": "envoy.buffer",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.cors",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.csrf",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.ext_authz",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.fault",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.adaptive_concurrency",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.aws_lambda",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.aws_request_signing",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.buffer",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.cache",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.cors",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.csrf",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.dynamic_forward_proxy",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.dynamo",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.ext_authz",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.fault",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.grpc_http1_bridge",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.grpc_http1_reverse_bridge",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.grpc_json_transcoder",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.grpc_stats",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.grpc_web",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.gzip",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.header_to_metadata",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.health_check",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.ip_tagging",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.jwt_authn",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.lua",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.on_demand",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.original_src",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.ratelimit",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.rbac",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.router",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.squash",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.tap",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.wasm",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.grpc_http1_bridge",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.grpc_json_transcoder",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.grpc_web",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.gzip",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.health_check",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.http_dynamo_filter",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.ip_tagging",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.lua",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.rate_limit",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.router",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.squash",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "istio.alpn",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "istio_authn",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "jwt-auth",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "mixer",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "dubbo.hessian2",
                    "category": "envoy.dubbo_proxy.serializers"
                },
                {
                    "name": "default",
                    "category": "envoy.dubbo_proxy.route_matchers"
                },
                {
                    "name": "envoy.cluster.eds",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.cluster.logical_dns",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.cluster.original_dst",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.cluster.static",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.cluster.strict_dns",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.clusters.aggregate",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.clusters.dynamic_forward_proxy",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.clusters.redis",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.retry_priorities.previous_priorities",
                    "category": "envoy.retry_priorities"
                },
                {
                    "name": "envoy.grpc_credentials.aws_iam",
                    "category": "envoy.grpc_credentials"
                },
                {
                    "name": "envoy.grpc_credentials.default",
                    "category": "envoy.grpc_credentials"
                },
                {
                    "name": "envoy.grpc_credentials.file_based_metadata",
                    "category": "envoy.grpc_credentials"
                },
                {
                    "name": "envoy.filters.network.upstream.metadata_exchange",
                    "category": "envoy.filters.upstream_network"
                },
                {
                    "name": "raw_udp_listener",
                    "category": "envoy.udp_listeners"
                },
                {
                    "name": "compress",
                    "category": "envoy.wasm.foreign_functions"
                },
                {
                    "name": "expr_create",
                    "category": "envoy.wasm.foreign_functions"
                },
                {
                    "name": "expr_delete",
                    "category": "envoy.wasm.foreign_functions"
                },
                {
                    "name": "expr_evaluate",
                    "category": "envoy.wasm.foreign_functions"
                },
                {
                    "name": "uncompress",
                    "category": "envoy.wasm.foreign_functions"
                },
                {
                    "name": "envoy.client_ssl_auth",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.echo",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.ext_authz",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.client_ssl_auth",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.direct_response",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.dubbo_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.echo",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.ext_authz",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.http_connection_manager",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.kafka_broker",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.local_ratelimit",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.metadata_exchange",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.mongo_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.mysql_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.ratelimit",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.rbac",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.redis_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.sni_cluster",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.tcp_cluster_rewrite",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.tcp_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.thrift_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.wasm",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.zookeeper_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.http_connection_manager",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.mongo_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.ratelimit",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.redis_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.tcp_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "forward_downstream_sni",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "mixer",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "sni_verifier",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.health_checkers.redis",
                    "category": "envoy.health_checkers"
                },
                {
                    "name": "envoy.transport_sockets.alts",
                    "category": "envoy.transport_sockets.upstream"
                },
                {
                    "name": "envoy.transport_sockets.raw_buffer",
                    "category": "envoy.transport_sockets.upstream"
                },
                {
                    "name": "envoy.transport_sockets.tap",
                    "category": "envoy.transport_sockets.upstream"
                },
                {
                    "name": "envoy.transport_sockets.tls",
                    "category": "envoy.transport_sockets.upstream"
                },
                {
                    "name": "raw_buffer",
                    "category": "envoy.transport_sockets.upstream"
                },
                {
                    "name": "tls",
                    "category": "envoy.transport_sockets.upstream"
                },
                {
                    "name": "envoy.access_loggers.file",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.access_loggers.http_grpc",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.access_loggers.tcp_grpc",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.access_loggers.wasm",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.file_access_log",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.http_grpc_access_log",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.tcp_grpc_access_log",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.wasm_access_log",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "auto",
                    "category": "envoy.thrift_proxy.protocols"
                },
                {
                    "name": "binary",
                    "category": "envoy.thrift_proxy.protocols"
                },
                {
                    "name": "binary/non-strict",
                    "category": "envoy.thrift_proxy.protocols"
                },
                {
                    "name": "compact",
                    "category": "envoy.thrift_proxy.protocols"
                },
                {
                    "name": "twitter",
                    "category": "envoy.thrift_proxy.protocols"
                },
                {
                    "name": "envoy.filters.listener.http_inspector",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.filters.listener.original_dst",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.filters.listener.original_src",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.filters.listener.proxy_protocol",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.filters.listener.tls_inspector",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.listener.http_inspector",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.listener.original_dst",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.listener.original_src",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.listener.proxy_protocol",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.listener.tls_inspector",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.dog_statsd",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.metrics_service",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.stat_sinks.dog_statsd",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.stat_sinks.hystrix",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.stat_sinks.metrics_service",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.stat_sinks.statsd",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.statsd",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.wasm",
                    "category": "wasm_vm"
                },
                {
                    "name": "envoy.ip",
                    "category": "envoy.resolvers"
                },
                {
                    "name": "envoy.filters.udp_listener.udp_proxy",
                    "category": "envoy.filters.udp_listener"
                },
                {
                    "name": "envoy.wasm.access_log_policy",
                    "category": "envoy.wasm.null_vms"
                },
                {
                    "name": "envoy.wasm.metadata_exchange",
                    "category": "envoy.wasm.null_vms"
                },
                {
                    "name": "envoy.wasm.null.stackdriver",
                    "category": "envoy.wasm.null_vms"
                },
                {
                    "name": "envoy.wasm.stats",
                    "category": "envoy.wasm.null_vms"
                },
                {
                    "name": "envoy.dynamic.ot",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.lightstep",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.tracers.datadog",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.tracers.dynamic_ot",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.tracers.lightstep",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.tracers.opencensus",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.tracers.xray",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.tracers.zipkin",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.zipkin",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.filters.dubbo.router",
                    "category": "envoy.dubbo_proxy.filters"
                },
                {
                    "name": "dubbo",
                    "category": "envoy.dubbo_proxy.protocols"
                },
                {
                    "name": "envoy.transport_sockets.alts",
                    "category": "envoy.transport_sockets.downstream"
                },
                {
                    "name": "envoy.transport_sockets.raw_buffer",
                    "category": "envoy.transport_sockets.downstream"
                },
                {
                    "name": "envoy.transport_sockets.tap",
                    "category": "envoy.transport_sockets.downstream"
                },
                {
                    "name": "envoy.transport_sockets.tls",
                    "category": "envoy.transport_sockets.downstream"
                },
                {
                    "name": "raw_buffer",
                    "category": "envoy.transport_sockets.downstream"
                },
                {
                    "name": "tls",
                    "category": "envoy.transport_sockets.downstream"
                },
                {
                    "name": "envoy.resource_monitors.fixed_heap",
                    "category": "envoy.resource_monitors"
                },
                {
                    "name": "envoy.resource_monitors.injected_resource",
                    "category": "envoy.resource_monitors"
                },
                {
                    "name": "envoy.retry_host_predicates.omit_canary_hosts",
                    "category": "envoy.retry_host_predicates"
                },
                {
                    "name": "envoy.retry_host_predicates.omit_host_metadata",
                    "category": "envoy.retry_host_predicates"
                },
                {
                    "name": "envoy.retry_host_predicates.previous_hosts",
                    "category": "envoy.retry_host_predicates"
                },
                {
                    "name": "envoy.extensions.http.cache.simple",
                    "category": "http_cache_factory"
                },
                {
                    "name": "auto",
                    "category": "envoy.thrift_proxy.transports"
                },
                {
                    "name": "framed",
                    "category": "envoy.thrift_proxy.transports"
                },
                {
                    "name": "header",
                    "category": "envoy.thrift_proxy.transports"
                },
                {
                    "name": "unframed",
                    "category": "envoy.thrift_proxy.transports"
                }
            ]
        },
        "staticResources": {
            "listeners": [
                {
                    "address": {
                        "socketAddress": {
                            "address": "0.0.0.0",
                            "portValue": 15090
                        }
                    },
                    "filterChains": [
                        {
                            "filters": [
                                {
                                    "name": "envoy.http_connection_manager",
                                    "typedConfig": {
                                        "@type": "type.googleapis.com/envoy.config.filter.network.http_connection_manager.v2.HttpConnectionManager",
                                        "statPrefix": "stats",
                                        "routeConfig": {
                                            "virtualHosts": [
                                                {
                                                    "name": "backend",
                                                    "domains": [
                                                        "*"
                                                    ],
                                                    "routes": [
                                                        {
                                                            "match": {
                                                                "prefix": "/stats/prometheus"
                                                            },
                                                            "route": {
                                                                "cluster": "prometheus_stats"
                                                            }
                                                        },
                                                        {
                                                            "match": {
                                                                "prefix": "/healthz/ready"
                                                            },
                                                            "route": {
                                                                "cluster": "agent"
                                                            }
                                                        }
                                                    ]
                                                }
                                            ]
                                        },
                                        "httpFilters": [
                                            {
                                                "name": "envoy.router",
                                                "typedConfig": {
                                                    "@type": "type.googleapis.com/envoy.config.filter.http.router.v2.Router"
                                                }
                                            }
                                        ]
                                    }
                                }
                            ]
                        }
                    ]
                }
            ],
            "clusters": [
                {
                    "name": "prometheus_stats",
                    "type": "STATIC",
                    "connectTimeout": "0.250s",
                    "loadAssignment": {
                        "clusterName": "prometheus_stats",
                        "endpoints": [
                            {
                                "lbEndpoints": [
                                    {
                                        "endpoint": {
                                            "address": {
                                                "socketAddress": {
                                                    "address": "127.0.0.1",
                                                    "portValue": 15000
                                                }
                                            }
                                        }
                                    }
                                ]
                            }
                        ]
                    }
                },
                {
                    "name": "agent",
                    "type": "STATIC",
                    "connectTimeout": "0.250s",
                    "loadAssignment": {
                        "clusterName": "prometheus_stats",
                        "endpoints": [
                            {
                                "lbEndpoints": [
                                    {
                                        "endpoint": {
                                            "address": {
                                                "socketAddress": {
                                                    "address": "127.0.0.1",
                                                    "portValue": 15020
                                                }
                                            }
                                        }
                                    }
                                ]
                            }
                        ]
                    }
                },
                {
                    "name": "sds-grpc",
                    "type": "STATIC",
                    "connectTimeout": "1s",
                    "loadAssignment": {
                        "clusterName": "sds-grpc",
                        "endpoints": [
                            {
                                "lbEndpoints": [
                                    {
                                        "endpoint": {
                                            "address": {
                                                "pipe": {
                                                    "path": "./etc/istio/proxy/SDS"
                                                }
                                            }
                                        }
                                    }
                                ]
                            }
                        ]
                    },
                    "http2ProtocolOptions": {

                    }
                },
                {
                    "name": "xds-grpc",
                    "type": "STRICT_DNS",
                    "connectTimeout": "1s",
                    "loadAssignment": {
                        "clusterName": "xds-grpc",
                        "endpoints": [
                            {
                                "lbEndpoints": [
                                    {
                                        "endpoint": {
                                            "address": {
                                                "socketAddress": {
                                                    "address": "istiod.istio-system.svc",
                                                    "portValue": 15012
                                                }
                                            }
                                        }
                                    }
                                ]
                            }
                        ]
                    },
                    "maxRequestsPerConnection": 1,
                    "circuitBreakers": {
                        "thresholds": [
                            {
                                "maxConnections": 100000,
                                "maxPendingRequests": 100000,
                                "maxRequests": 100000
                            },
                            {
                                "priority": "HIGH",
                                "maxConnections": 100000,
                                "maxPendingRequests": 100000,
                                "maxRequests": 100000
                            }
                        ]
                    },
                    "http2ProtocolOptions": {

                    },
                    "respectDnsTtl": true,
                    "dnsLookupFamily": "V4_ONLY",
                    "transportSocket": {
                        "name": "envoy.transport_sockets.tls",
                        "typedConfig": {
                            "@type": "type.googleapis.com/envoy.api.v2.auth.UpstreamTlsContext",
                            "commonTlsContext": {
                                "tlsCertificateSdsSecretConfigs": [
                                    {
                                        "name": "default",
                                        "sdsConfig": {
                                            "apiConfigSource": {
                                                "apiType": "GRPC",
                                                "grpcServices": [
                                                    {
                                                        "envoyGrpc": {
                                                            "clusterName": "sds-grpc"
                                                        }
                                                    }
                                                ]
                                            }
                                        }
                                    }
                                ],
                                "validationContext": {
                                    "trustedCa": {
                                        "filename": "./var/run/secrets/istio/root-cert.pem"
                                    },
                                    "matchSubjectAltNames": [
                                        {
                                            "exact": "istiod.istio-system.svc"
                                        }
                                    ]
                                },
                                "alpnProtocols": [
                                    "h2"
                                ]
                            }
                        }
                    },
                    "upstreamConnectionOptions": {
                        "tcpKeepalive": {
                            "keepaliveTime": 300
                        }
                    }
                },
                {
                    "name": "zipkin",
                    "type": "STRICT_DNS",
                    "connectTimeout": "1s",
                    "loadAssignment": {
                        "clusterName": "zipkin",
                        "endpoints": [
                            {
                                "lbEndpoints": [
                                    {
                                        "endpoint": {
                                            "address": {
                                                "socketAddress": {
                                                    "address": "zipkin.istio-system",
                                                    "portValue": 9411
                                                }
                                            }
                                        }
                                    }
                                ]
                            }
                        ]
                    },
                    "respectDnsTtl": true,
                    "dnsLookupFamily": "V4_ONLY"
                }
            ]
        },
        "dynamicResources": {
            "ldsConfig": {
                "ads": {

                }
            },
            "cdsConfig": {
                "ads": {

                }
            },
            "adsConfig": {
                "apiType": "GRPC",
                "grpcServices": [
                    {
                        "envoyGrpc": {
                            "clusterName": "xds-grpc"
                        }
                    }
                ]
            }
        },
        "statsConfig": {
            "statsTags": [
                {
                    "tagName": "cluster_name",
                    "regex": "^cluster\\.((.+?(\\..+?\\.svc\\.cluster\\.local)?)\\.)"
                },
                {
                    "tagName": "tcp_prefix",
                    "regex": "^tcp\\.((.*?)\\.)\\w+?$"
                },
                {
                    "tagName": "response_code",
                    "regex": "(response_code=\\.=(.+?);\\.;)|_rq(_(\\.d{3}))$"
                },
                {
                    "tagName": "response_code_class",
                    "regex": "_rq(_(\\dxx))$"
                },
                {
                    "tagName": "http_conn_manager_listener_prefix",
                    "regex": "^listener(?=\\.).*?\\.http\\.(((?:[_.[:digit:]]*|[_\\[\\]aAbBcCdDeEfF[:digit:]]*))\\.)"
                },
                {
                    "tagName": "http_conn_manager_prefix",
                    "regex": "^http\\.(((?:[_.[:digit:]]*|[_\\[\\]aAbBcCdDeEfF[:digit:]]*))\\.)"
                },
                {
                    "tagName": "listener_address",
                    "regex": "^listener\\.(((?:[_.[:digit:]]*|[_\\[\\]aAbBcCdDeEfF[:digit:]]*))\\.)"
                },
                {
                    "tagName": "mongo_prefix",
                    "regex": "^mongo\\.(.+?)\\.(collection|cmd|cx_|op_|delays_|decoding_)(.*?)$"
                },
                {
                    "tagName": "reporter",
                    "regex": "(reporter=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "source_namespace",
                    "regex": "(source_namespace=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "source_workload",
                    "regex": "(source_workload=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "source_workload_namespace",
                    "regex": "(source_workload_namespace=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "source_principal",
                    "regex": "(source_principal=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "source_app",
                    "regex": "(source_app=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "source_version",
                    "regex": "(source_version=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "source_cluster_id",
                    "regex": "(source_cluster_id=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_namespace",
                    "regex": "(destination_namespace=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "destination_workload",
                    "regex": "(destination_workload=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "destination_workload_namespace",
                    "regex": "(destination_workload_namespace=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "destination_principal",
                    "regex": "(destination_principal=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "destination_app",
                    "regex": "(destination_app=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "destination_version",
                    "regex": "(destination_version=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "destination_service",
                    "regex": "(destination_service=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "destination_service_name",
                    "regex": "(destination_service_name=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "destination_service_namespace",
                    "regex": "(destination_service_namespace=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "destination_port",
                    "regex": "(destination_port=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "destination_cluster_id",
                    "regex": "(destination_cluster_id=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "request_protocol",
                    "regex": "(request_protocol=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "response_flags",
                    "regex": "(response_flags=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "grpc_response_status",
                    "regex": "(grpc_response_status=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "connection_security_policy",
                    "regex": "(connection_security_policy=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "permissive_response_code",
                    "regex": "(permissive_response_code=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "permissive_response_policyid",
                    "regex": "(permissive_response_policyid=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "cache",
                    "regex": "(cache\\.(.+?)\\.)"
                },
                {
                    "tagName": "component",
                    "regex": "(component\\.(.+?)\\.)"
                },
                {
                    "tagName": "tag",
                    "regex": "(tag\\.(.+?);\\.)"
                },
                {
                    "tagName": "source_canonical_service",
                    "regex": "(source_canonical_service=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "destination_canonical_service",
                    "regex": "(destination_canonical_service=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "source_canonical_revision",
                    "regex": "(source_canonical_revision=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "destination_canonical_revision",
                    "regex": "(destination_canonical_revision=\\.=(.+?);\\.;)"
                },
                {
                    "tagName": "wasm_filter",
                    "regex": "(wasm_filter\\.(.+?)\\.)"
                }
            ],
            "useAllDefaultTags": false,
            "statsMatcher": {
                "inclusionList": {
                    "patterns": [
                        {
                            "prefix": "reporter="
                        },
                        {
                            "prefix": "cluster_manager"
                        },
                        {
                            "prefix": "listener_manager"
                        },
                        {
                            "prefix": "http_mixer_filter"
                        },
                        {
                            "prefix": "tcp_mixer_filter"
                        },
                        {
                            "prefix": "server"
                        },
                        {
                            "prefix": "cluster.xds-grpc"
                        },
                        {
                            "prefix": "wasm"
                        },
                        {
                            "prefix": "component"
                        }
                    ]
                }
            }
        },
        "tracing": {
            "http": {
                "name": "envoy.zipkin",
                "typedConfig": {
                    "@type": "type.googleapis.com/envoy.config.trace.v2.ZipkinConfig",
                    "collectorCluster": "zipkin",
                    "collectorEndpoint": "/api/v2/spans",
                    "traceId128bit": true,
                    "sharedSpanContext": false,
                    "collectorEndpointVersion": "HTTP_JSON"
                }
            }
        },
        "admin": {
            "accessLogPath": "/dev/null",
            "profilePath": "/etc/istio/proxy/envoy.prof",
            "address": {
                "socketAddress": {
                    "address": "127.0.0.1",
                    "portValue": 15000
                }
            }
        }
    },
    "lastUpdated": "2020-04-24T03:20:52.266Z"
}sdake@beast-01:~/ms-demo/microservices-demo$ istioctl proxy-config listener cartservice-bdfbcb9fd-fdpt5.default
ADDRESS             PORT      TYPE
10.103.67.111       6379      TCP
10.96.0.10          53        TCP
10.105.145.4        15012     TCP
10.98.8.117         443       TCP
0.0.0.0             443       TCP
10.96.0.1           443       TCP
10.105.145.4        443       TCP
10.98.8.117         15443     TCP
169.254.169.254     443       TCP
0.0.0.0             15014     HTTP+TCP
0.0.0.0             9090      HTTP+TCP
0.0.0.0             7070      HTTP+TCP
0.0.0.0             5050      HTTP+TCP
0.0.0.0             5000      HTTP+TCP
10.105.145.4        853       HTTP+TCP
10.98.8.117         15020     HTTP+TCP
0.0.0.0             50051     HTTP+TCP
10.96.0.10          9153      HTTP+TCP
0.0.0.0             15010     HTTP+TCP
0.0.0.0             80        HTTP+TCP
0.0.0.0             9555      HTTP+TCP
0.0.0.0             7000      HTTP+TCP
0.0.0.0             3550      HTTP+TCP
0.0.0.0             8080      HTTP+TCP
0.0.0.0             15001     TCP
0.0.0.0             15006     HTTP+TCP
0.0.0.0             15090     HTTP
sdake@beast-01:~/ms-demo/microservices-demo$ istioctl proxy-config route cartservice-bdfbcb9fd-fdpt5.default
NOTE: This output only contains routes loaded via RDS.
NAME                                                          VIRTUAL HOSTS
istio-ingressgateway.istio-system.svc.cluster.local:15020     1
7000                                                          2
inbound|7070|grpc|cartservice.default.svc.cluster.local       1
80                                                            7
3550                                                          2
InboundPassthroughClusterIpv4                                 1
InboundPassthroughClusterIpv4                                 1
kube-dns.kube-system.svc.cluster.local:9153                   1
inbound|7070|grpc|cartservice.default.svc.cluster.local       1
istiod.istio-system.svc.cluster.local:853                     1
5050                                                          2
5000                                                          2
7070                                                          2
8080                                                          2
9090                                                          2
9555                                                          2
15010                                                         2
15014                                                         2
50051                                                         3
                                                              1
sdake@beast-01:~/ms-demo/microservices-demo$ istioctl proxy-config endpoints cartservice-bdfbcb9fd-fdpt5.default
ENDPOINT                         STATUS      OUTLIER CHECK     CLUSTER
10.105.145.4:15012               HEALTHY     OK                xds-grpc
127.0.0.1:7070                   HEALTHY     OK                inbound|7070|grpc|cartservice.default.svc.cluster.local
127.0.0.1:15000                  HEALTHY     OK                prometheus_stats
127.0.0.1:15020                  HEALTHY     OK                agent
127.0.0.1:15090                  HEALTHY     OK                inbound|15090|mgmt-15090|mgmtCluster
192.168.102.131:53               HEALTHY     OK                outbound|53||kube-dns.kube-system.svc.cluster.local
192.168.102.131:9153             HEALTHY     OK                outbound|9153||kube-dns.kube-system.svc.cluster.local
192.168.102.132:53               HEALTHY     OK                outbound|53||kube-dns.kube-system.svc.cluster.local
192.168.102.132:9153             HEALTHY     OK                outbound|9153||kube-dns.kube-system.svc.cluster.local
192.168.102.133:15010            HEALTHY     OK                outbound|15010||istiod.istio-system.svc.cluster.local
192.168.102.133:15012            HEALTHY     OK                outbound|15012||istiod.istio-system.svc.cluster.local
192.168.102.133:15014            HEALTHY     OK                outbound|15014||istiod.istio-system.svc.cluster.local
192.168.102.133:15017            HEALTHY     OK                outbound|443||istiod.istio-system.svc.cluster.local
192.168.102.133:15053            HEALTHY     OK                outbound|853||istiod.istio-system.svc.cluster.local
192.168.102.134:8080             HEALTHY     OK                outbound|80||istio-ingressgateway.istio-system.svc.cluster.local
192.168.102.134:8443             HEALTHY     OK                outbound|443||istio-ingressgateway.istio-system.svc.cluster.local
192.168.102.134:15020            HEALTHY     OK                outbound|15020||istio-ingressgateway.istio-system.svc.cluster.local
192.168.102.134:15443            HEALTHY     OK                outbound|15443||istio-ingressgateway.istio-system.svc.cluster.local
192.168.102.135:9090             HEALTHY     OK                outbound|9090||prometheus.istio-system.svc.cluster.local
192.168.102.148:8080             HEALTHY     OK                outbound|80||frontend-external.default.svc.cluster.local
192.168.102.148:8080             HEALTHY     OK                outbound|80||frontend.default.svc.cluster.local
192.168.102.149:50051            HEALTHY     OK                outbound|50051||paymentservice.default.svc.cluster.local
192.168.102.150:5050             HEALTHY     OK                outbound|5050||checkoutservice.default.svc.cluster.local
192.168.102.151:6379             HEALTHY     OK                outbound|6379||redis-cart.default.svc.cluster.local
192.168.102.153:3550             HEALTHY     OK                outbound|3550||productcatalogservice.default.svc.cluster.local
192.168.102.154:50051            HEALTHY     OK                outbound|50051||shippingservice.default.svc.cluster.local
192.168.102.155:9555             HEALTHY     OK                outbound|9555||adservice.default.svc.cluster.local
192.168.102.156:7000             HEALTHY     OK                outbound|7000||currencyservice.default.svc.cluster.local
192.168.102.157:8080             HEALTHY     OK                outbound|8080||recommendationservice.default.svc.cluster.local
192.168.102.158:7070             HEALTHY     OK                outbound|7070||cartservice.default.svc.cluster.local
192.168.102.159:8080             HEALTHY     OK                outbound|5000||emailservice.default.svc.cluster.local
192.168.7.105:6443               HEALTHY     OK                outbound|443||kubernetes.default.svc.cluster.local
unix://./etc/istio/proxy/SDS     HEALTHY     OK                sds-grpc
istio-policy-bot commented 3 months ago

🚧 This issue or pull request has been closed due to not having had activity from an Istio team member since 2020-04-24. If you feel this issue or pull request deserves attention, please reopen the issue. Please see this wiki page for more information. Thank you for your contributions.

Created by the issue and PR lifecycle manager.