envoyproxy/envoy

Access log token discovery or validation for xDS

Open

#13,620 opened on 2020年10月19日

GitHub で見る
 (2 comments) (0 reactions) (0 assignees)C++ (5,373 forks)batch import
area/access_loghelp wanted

Repository metrics

Stars
 (27,997 stars)
PR merge metrics
 (平均マージ 8d) (30d で 378 merged PRs)

説明

Description:

An xDS server may need to deal with multiple Envoy versions (either simultaneously, or over its deployed lifetime). The set of valid access log tokens can vary across Envoy versions. If the xDS server sends a configuration with an invalid log token, that update is rejected with a Not supported field in StreamInfo error message. Other than by parsing the message string in the ErrorDetail, the xDS server doesn't have any way to know that the log token was invalid.

One way to solve this would be for xDS servers to have access to a canonical list of valid log tokens for the Envoy version. Another way could be to use the ErrorDetail.Details field to expose some structured information that the xDS server could use to drop the invalid log token.

コントリビューターガイド