├── LICENSE ├── README.md ├── chap-10 ├── mixer-adapter-config.yaml └── print-trace-headers.go ├── chap-11 ├── istio-galley-validatingwebhookconfiguration.yaml ├── istio-galley.logs ├── pilot-logs.md └── pilot-registration-example.json ├── chap-12 ├── httpbin-cross-cluster-svcentry.yaml ├── httpbin-cross-cluster-vs.yaml ├── httpbin-depl-v2.yaml ├── httpbin-destination-v2.yaml ├── httpbin-gw-vs.yaml ├── httpbin-svc-depl.yaml ├── httpbin-vs-v1.yaml └── httpbin-vs-v2-5.yaml ├── chap-13 ├── bookinfo-vs.yaml ├── egress-serviceentry-a.yaml ├── egress-serviceentry-b.yaml ├── ingress-gw.yaml ├── istiocoredns.yaml ├── reviews-destinationrule.yaml ├── reviews-ingress-virtual-service.yaml └── reviews-virtualservice.yaml ├── chap-7 ├── foo-gw.yaml ├── foo-routes.yaml ├── foo-vs.yaml ├── some-domain-dest.yaml └── some-domain-se.yaml └── chap-8 ├── canary-cookie.yaml ├── canary-shift.yaml ├── dns-se.yaml ├── egress-destrule.yaml ├── egress-gw-wiki.yaml ├── foo-vs.yaml ├── gw-examples.yaml ├── gw-https-upgrade.yaml ├── gw-https.yaml ├── gw-to-vses.yaml ├── k8s-se.yaml ├── per-try-timeout.yaml ├── round-robin.yaml ├── se-egress-gw.yaml ├── static-se.yaml ├── svc-endpoint.yaml ├── timeout.yaml └── vs-examples.yaml /LICENSE: -------------------------------------------------------------------------------- 1 | Apache License 2 | Version 2.0, January 2004 3 | http://www.apache.org/licenses/ 4 | 5 | TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 6 | 7 | 1. Definitions. 8 | 9 | "License" shall mean the terms and conditions for use, reproduction, 10 | and distribution as defined by Sections 1 through 9 of this document. 11 | 12 | "Licensor" shall mean the copyright owner or entity authorized by 13 | the copyright owner that is granting the License. 14 | 15 | "Legal Entity" shall mean the union of the acting entity and all 16 | other entities that control, are controlled by, or are under common 17 | control with that entity. For the purposes of this definition, 18 | "control" means (i) the power, direct or indirect, to cause the 19 | direction or management of such entity, whether by contract or 20 | otherwise, or (ii) ownership of fifty percent (50%) or more of the 21 | outstanding shares, or (iii) beneficial ownership of such entity. 22 | 23 | "You" (or "Your") shall mean an individual or Legal Entity 24 | exercising permissions granted by this License. 25 | 26 | "Source" form shall mean the preferred form for making modifications, 27 | including but not limited to software source code, documentation 28 | source, and configuration files. 29 | 30 | "Object" form shall mean any form resulting from mechanical 31 | transformation or translation of a Source form, including but 32 | not limited to compiled object code, generated documentation, 33 | and conversions to other media types. 34 | 35 | "Work" shall mean the work of authorship, whether in Source or 36 | Object form, made available under the License, as indicated by a 37 | copyright notice that is included in or attached to the work 38 | (an example is provided in the Appendix below). 39 | 40 | "Derivative Works" shall mean any work, whether in Source or Object 41 | form, that is based on (or derived from) the Work and for which the 42 | editorial revisions, annotations, elaborations, or other modifications 43 | represent, as a whole, an original work of authorship. For the purposes 44 | of this License, Derivative Works shall not include works that remain 45 | separable from, or merely link (or bind by name) to the interfaces of, 46 | the Work and Derivative Works thereof. 47 | 48 | "Contribution" shall mean any work of authorship, including 49 | the original version of the Work and any modifications or additions 50 | to that Work or Derivative Works thereof, that is intentionally 51 | submitted to Licensor for inclusion in the Work by the copyright owner 52 | or by an individual or Legal Entity authorized to submit on behalf of 53 | the copyright owner. For the purposes of this definition, "submitted" 54 | means any form of electronic, verbal, or written communication sent 55 | to the Licensor or its representatives, including but not limited to 56 | communication on electronic mailing lists, source code control systems, 57 | and issue tracking systems that are managed by, or on behalf of, the 58 | Licensor for the purpose of discussing and improving the Work, but 59 | excluding communication that is conspicuously marked or otherwise 60 | designated in writing by the copyright owner as "Not a Contribution." 61 | 62 | "Contributor" shall mean Licensor and any individual or Legal Entity 63 | on behalf of whom a Contribution has been received by Licensor and 64 | subsequently incorporated within the Work. 65 | 66 | 2. Grant of Copyright License. Subject to the terms and conditions of 67 | this License, each Contributor hereby grants to You a perpetual, 68 | worldwide, non-exclusive, no-charge, royalty-free, irrevocable 69 | copyright license to reproduce, prepare Derivative Works of, 70 | publicly display, publicly perform, sublicense, and distribute the 71 | Work and such Derivative Works in Source or Object form. 72 | 73 | 3. Grant of Patent License. Subject to the terms and conditions of 74 | this License, each Contributor hereby grants to You a perpetual, 75 | worldwide, non-exclusive, no-charge, royalty-free, irrevocable 76 | (except as stated in this section) patent license to make, have made, 77 | use, offer to sell, sell, import, and otherwise transfer the Work, 78 | where such license applies only to those patent claims licensable 79 | by such Contributor that are necessarily infringed by their 80 | Contribution(s) alone or by combination of their Contribution(s) 81 | with the Work to which such Contribution(s) was submitted. If You 82 | institute patent litigation against any entity (including a 83 | cross-claim or counterclaim in a lawsuit) alleging that the Work 84 | or a Contribution incorporated within the Work constitutes direct 85 | or contributory patent infringement, then any patent licenses 86 | granted to You under this License for that Work shall terminate 87 | as of the date such litigation is filed. 88 | 89 | 4. Redistribution. You may reproduce and distribute copies of the 90 | Work or Derivative Works thereof in any medium, with or without 91 | modifications, and in Source or Object form, provided that You 92 | meet the following conditions: 93 | 94 | (a) You must give any other recipients of the Work or 95 | Derivative Works a copy of this License; and 96 | 97 | (b) You must cause any modified files to carry prominent notices 98 | stating that You changed the files; and 99 | 100 | (c) You must retain, in the Source form of any Derivative Works 101 | that You distribute, all copyright, patent, trademark, and 102 | attribution notices from the Source form of the Work, 103 | excluding those notices that do not pertain to any part of 104 | the Derivative Works; and 105 | 106 | (d) If the Work includes a "NOTICE" text file as part of its 107 | distribution, then any Derivative Works that You distribute must 108 | include a readable copy of the attribution notices contained 109 | within such NOTICE file, excluding those notices that do not 110 | pertain to any part of the Derivative Works, in at least one 111 | of the following places: within a NOTICE text file distributed 112 | as part of the Derivative Works; within the Source form or 113 | documentation, if provided along with the Derivative Works; or, 114 | within a display generated by the Derivative Works, if and 115 | wherever such third-party notices normally appear. The contents 116 | of the NOTICE file are for informational purposes only and 117 | do not modify the License. You may add Your own attribution 118 | notices within Derivative Works that You distribute, alongside 119 | or as an addendum to the NOTICE text from the Work, provided 120 | that such additional attribution notices cannot be construed 121 | as modifying the License. 122 | 123 | You may add Your own copyright statement to Your modifications and 124 | may provide additional or different license terms and conditions 125 | for use, reproduction, or distribution of Your modifications, or 126 | for any such Derivative Works as a whole, provided Your use, 127 | reproduction, and distribution of the Work otherwise complies with 128 | the conditions stated in this License. 129 | 130 | 5. Submission of Contributions. Unless You explicitly state otherwise, 131 | any Contribution intentionally submitted for inclusion in the Work 132 | by You to the Licensor shall be under the terms and conditions of 133 | this License, without any additional terms or conditions. 134 | Notwithstanding the above, nothing herein shall supersede or modify 135 | the terms of any separate license agreement you may have executed 136 | with Licensor regarding such Contributions. 137 | 138 | 6. Trademarks. This License does not grant permission to use the trade 139 | names, trademarks, service marks, or product names of the Licensor, 140 | except as required for reasonable and customary use in describing the 141 | origin of the Work and reproducing the content of the NOTICE file. 142 | 143 | 7. Disclaimer of Warranty. Unless required by applicable law or 144 | agreed to in writing, Licensor provides the Work (and each 145 | Contributor provides its Contributions) on an "AS IS" BASIS, 146 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or 147 | implied, including, without limitation, any warranties or conditions 148 | of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A 149 | PARTICULAR PURPOSE. You are solely responsible for determining the 150 | appropriateness of using or redistributing the Work and assume any 151 | risks associated with Your exercise of permissions under this License. 152 | 153 | 8. Limitation of Liability. In no event and under no legal theory, 154 | whether in tort (including negligence), contract, or otherwise, 155 | unless required by applicable law (such as deliberate and grossly 156 | negligent acts) or agreed to in writing, shall any Contributor be 157 | liable to You for damages, including any direct, indirect, special, 158 | incidental, or consequential damages of any character arising as a 159 | result of this License or out of the use or inability to use the 160 | Work (including but not limited to damages for loss of goodwill, 161 | work stoppage, computer failure or malfunction, or any and all 162 | other commercial damages or losses), even if such Contributor 163 | has been advised of the possibility of such damages. 164 | 165 | 9. Accepting Warranty or Additional Liability. While redistributing 166 | the Work or Derivative Works thereof, You may choose to offer, 167 | and charge a fee for, acceptance of support, warranty, indemnity, 168 | or other liability obligations and/or rights consistent with this 169 | License. However, in accepting such obligations, You may act only 170 | on Your own behalf and on Your sole responsibility, not on behalf 171 | of any other Contributor, and only if You agree to indemnify, 172 | defend, and hold each Contributor harmless for any liability 173 | incurred by, or claims asserted against, such Contributor by reason 174 | of your accepting any such warranty or additional liability. 175 | 176 | END OF TERMS AND CONDITIONS 177 | 178 | APPENDIX: How to apply the Apache License to your work. 179 | 180 | To apply the Apache License to your work, attach the following 181 | boilerplate notice, with the fields enclosed by brackets "[]" 182 | replaced with your own identifying information. (Don't include 183 | the brackets!) The text should be enclosed in the appropriate 184 | comment syntax for the file format. We also recommend that a 185 | file or class name and description of purpose be included on the 186 | same "printed page" as the copyright notice for easier 187 | identification within third-party archives. 188 | 189 | Copyright [yyyy] [name of copyright owner] 190 | 191 | Licensed under the Apache License, Version 2.0 (the "License"); 192 | you may not use this file except in compliance with the License. 193 | You may obtain a copy of the License at 194 | 195 | http://www.apache.org/licenses/LICENSE-2.0 196 | 197 | Unless required by applicable law or agreed to in writing, software 198 | distributed under the License is distributed on an "AS IS" BASIS, 199 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 200 | See the License for the specific language governing permissions and 201 | limitations under the License. 202 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # Istio: Up and Running from O'Reilly 2 | Example code and files for [Istio: Up and Running](https://layer5.io/books/istio-up-and-running). [Subscribe](https://layer5.io/subscribe) for updates. 3 | 4 | # Authors 5 | [Lee Calcote](https://twitter.com/lcalcote) and [Zack Butcher](https://twitter.com/ZackButcher) 6 | -------------------------------------------------------------------------------- /chap-10/mixer-adapter-config.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: "config.istio.io/v1alpha2" 2 | kind: handler 3 | metadata: 4 | name: prometheus 5 | namespace: istio-system 6 | spec: 7 | compiledAdapter: prometheus 8 | params: 9 | metrics: 10 | - name: requests_total 11 | instance_name: requestcount.metric.istio-system 12 | kind: COUNTER 13 | label_names:2 14 | - reporter 15 | - source_app 16 | - source_namespace 17 | - source_principal 18 | - source_workload 19 | - source_workload_namespace 20 | - source_version 21 | - destination_app 22 | - destination_namespace 23 | - destination_principal 24 | - destination_workload 25 | - destination_workload_namespace 26 | - destination_version 27 | - destination_service 28 | - destination_service_name 29 | - destination_service_namespace 30 | - request_protocol 31 | - response_code 32 | - connection_mtls 33 | - name: request_duration_seconds 34 | instance_name: requestduration.metric.istio-system 35 | kind: DISTRIBUTION 36 | label_names: 37 | - reporter 38 | - source_app 39 | - source_namespace 40 | - source_principal 41 | - source_workload 42 | - source_workload_namespace 43 | - source_version 44 | - destination_app 45 | - destination_namespace 46 | - destination_principal 47 | - destination_workload 48 | - destination_workload_namespace 49 | - destination_version 50 | - destination_service 51 | - destination_service_name 52 | - destination_service_namespace 53 | - request_protocol 54 | - response_code 55 | - connection_mtls 56 | buckets: 57 | explicit_buckets: 58 | bounds: [0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10] 59 | - name: request_bytes 60 | instance_name: requestsize.metric.istio-system 61 | kind: DISTRIBUTION 62 | label_names: 63 | - reporter 64 | - source_app 65 | - source_namespace 66 | - source_principal 67 | - source_workload 68 | - source_workload_namespace 69 | - source_version 70 | - destination_app 71 | - destination_namespace 72 | - destination_principal 73 | - destination_workload 74 | - destination_workload_namespace 75 | - destination_version 76 | - destination_service 77 | - destination_service_name 78 | - destination_service_namespace 79 | - request_protocol 80 | - response_code 81 | - connection_mtls 82 | buckets: 83 | exponentialBuckets: 84 | numFiniteBuckets: 8 85 | scale: 1 86 | growthFactor: 10 87 | - name: response_bytes 88 | instance_name: responsesize.metric.istio-system 89 | kind: DISTRIBUTION 90 | label_names: 91 | - reporter 92 | - source_app 93 | - source_namespace 94 | - source_principal 95 | - source_workload 96 | - source_workload_namespace 97 | - source_version 98 | - destination_app 99 | - destination_namespace 100 | - destination_principal 101 | - destination_workload 102 | - destination_workload_namespace 103 | - destination_version 104 | - destination_service 105 | - destination_service_name 106 | - destination_service_namespace 107 | - request_protocol 108 | - response_code 109 | - connection_mtls 110 | buckets: 111 | exponentialBuckets: 112 | numFiniteBuckets: 8 113 | scale: 1 114 | growthFactor: 10 115 | - name: tcp_sent_bytes_total 116 | instance_name: tcpbytesent.metric.istio-system 117 | kind: COUNTER 118 | label_names: 119 | - reporter 120 | - source_app 121 | - source_namespace 122 | - source_principal 123 | - source_workload 124 | - source_workload_namespace 125 | - source_version 126 | - destination_app 127 | - destination_namespace 128 | - destination_principal 129 | - destination_workload 130 | - destination_workload_namespace 131 | - destination_version 132 | - destination_service 133 | - destination_service_name 134 | - destination_service_namespace 135 | - connection_mtls 136 | - name: tcp_received_bytes_total 137 | instance_name: tcpbytereceived.metric.istio-system 138 | kind: COUNTER 139 | label_names: 140 | - reporter 141 | - source_app 142 | - source_namespace 143 | - source_principal 144 | - source_workload 145 | - source_workload_namespace 146 | - source_version 147 | - destination_app 148 | - destination_namespace 149 | - destination_principal 150 | - destination_workload 151 | - destination_workload_namespace 152 | - destination_version 153 | - destination_service 154 | - destination_service_name 155 | - destination_service_namespace 156 | - connection_mtls 157 | - name: tcp_connections_opened_total 158 | instance_name: tcpconnectionsopened.metric.istio-system 159 | kind: COUNTER 160 | label_names: 161 | - reporter 162 | - source_app 163 | - source_namespace 164 | - source_principal 165 | - source_workload 166 | - source_workload_namespace 167 | - source_version 168 | - destination_app 169 | - destination_namespace 170 | - destination_principal 171 | - destination_workload 172 | - destination_workload_namespace 173 | - destination_version 174 | - destination_service 175 | - destination_service_name 176 | - destination_service_namespace 177 | - connection_mtls 178 | - name: tcp_connections_closed_total 179 | instance_name: tcpconnectionsclosed.metric.istio-system 180 | kind: COUNTER 181 | label_names: 182 | - reporter 183 | - source_app 184 | - source_namespace 185 | - source_principal 186 | - source_workload 187 | - source_workload_namespace 188 | - source_version 189 | - destination_app 190 | - destination_namespace 191 | - destination_principal 192 | - destination_workload 193 | - destination_workload_namespace 194 | - destination_version 195 | - destination_service 196 | - destination_service_name 197 | - destination_service_namespace 198 | - connection_mtls 199 | --- 200 | apiVersion: "config.istio.io/v1alpha2" 201 | kind: rule 202 | metadata: 203 | name: promhttp 204 | namespace: istio-system 205 | spec: 206 | match: (context.protocol == "http" || context.protocol == "grpc") && (match((request.useragent | "-"), "kube-probe*") == false) 207 | actions: 208 | - handler: prometheus 209 | instances: 210 | - requestcount.metric 211 | - requestduration.metric 212 | - requestsize.metric 213 | - responsesize.metric 214 | --- 215 | apiVersion: "config.istio.io/v1alpha2" 216 | kind: rule 217 | metadata: 218 | name: promtcp 219 | namespace: istio-system 220 | spec: 221 | match: context.protocol == "tcp" 222 | actions: 223 | - handler: prometheus 224 | instances: 225 | - tcpbytesent.metric 226 | - tcpbytereceived.metric 227 | 228 | -------------------------------------------------------------------------------- /chap-10/print-trace-headers.go: -------------------------------------------------------------------------------- 1 | package main 2 | 3 | import ( 4 | "fmt" 5 | "log" 6 | "net/http" 7 | ) 8 | 9 | func tracingMiddleware(next http.HandlerFunc) http.HandlerFunc { 10 | incomingHeaders := []string{ 11 | "x-request-id", 12 | "x-b3-traceid", 13 | "x-b3-spanid", 14 | "x-b3-parentspanid", 15 | "x-b3-sampled", 16 | "x-b3-flags", 17 | "x-ot-span-context", 18 | } 19 | 20 | return func(w http.ResponseWriter, r *http.Request) { 21 | for _, th := range incomingHeaders { 22 | w.Header().Set(th, r.Header.Get(th)) 23 | } 24 | next.ServeHTTP(w, r) 25 | } 26 | } 27 | 28 | func main() { 29 | http.HandleFunc("/", tracingMiddleware(func(w http.ResponseWriter, r *http.Request) { 30 | fmt.Fprintf(w, "Hello headers, %v", r.Header) 31 | })) 32 | 33 | log.Fatal(http.ListenAndServe(":8081", nil)) 34 | } -------------------------------------------------------------------------------- /chap-11/istio-galley-validatingwebhookconfiguration.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: admissionregistration.k8s.io/v1beta1 2 | kind: ValidatingWebhookConfiguration 3 | metadata: 4 | creationTimestamp: "2019-06-11T15:33:21Z" 5 | generation: 1 6 | labels: 7 | app: galley 8 | chart: galley 9 | heritage: Tiller 10 | istio: galley 11 | release: istio 12 | name: istio-galley 13 | ownerReferences: 14 | - apiVersion: extensions/v1beta1 15 | blockOwnerDeletion: true 16 | controller: true 17 | kind: Deployment 18 | name: istio-galley 19 | uid: 243d2a39-8883-11e9-a548-00505698ee31 20 | resourceVersion: "6644740" 21 | selfLink: /apis/admissionregistration.k8s.io/v1beta1/validatingwebhookconfigurations/istio-galley 22 | uid: 3e764e60-8c5e-11e9-9e8d-00505698ee31 23 | webhooks: 24 | - admissionReviewVersions: 25 | - v1beta1 26 | clientConfig: 27 | caBundle: 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 28 | service: 29 | name: istio-galley 30 | namespace: istio-system 31 | path: /admitpilot 32 | failurePolicy: Fail 33 | name: pilot.validation.istio.io 34 | namespaceSelector: {} 35 | rules: 36 | - apiGroups: 37 | - config.istio.io 38 | apiVersions: 39 | - v1alpha2 40 | operations: 41 | - CREATE 42 | - UPDATE 43 | resources: 44 | - httpapispecs 45 | - httpapispecbindings 46 | - quotaspecs 47 | - quotaspecbindings 48 | scope: '*' 49 | - apiGroups: 50 | - rbac.istio.io 51 | apiVersions: 52 | - '*' 53 | operations: 54 | - CREATE 55 | - UPDATE 56 | resources: 57 | - '*' 58 | scope: '*' 59 | - apiGroups: 60 | - authentication.istio.io 61 | apiVersions: 62 | - '*' 63 | operations: 64 | - CREATE 65 | - UPDATE 66 | resources: 67 | - '*' 68 | scope: '*' 69 | - apiGroups: 70 | - networking.istio.io 71 | apiVersions: 72 | - '*' 73 | operations: 74 | - CREATE 75 | - UPDATE 76 | resources: 77 | - destinationrules 78 | - envoyfilters 79 | - gateways 80 | - serviceentries 81 | - sidecars 82 | - virtualservices 83 | scope: '*' 84 | sideEffects: Unknown 85 | timeoutSeconds: 30 86 | - admissionReviewVersions: 87 | - v1beta1 88 | clientConfig: 89 | caBundle: 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 90 | service: 91 | name: istio-galley 92 | namespace: istio-system 93 | path: /admitmixer 94 | failurePolicy: Fail 95 | name: mixer.validation.istio.io 96 | namespaceSelector: {} 97 | rules: 98 | - apiGroups: 99 | - config.istio.io 100 | apiVersions: 101 | - v1alpha2 102 | operations: 103 | - CREATE 104 | - UPDATE 105 | resources: 106 | - rules 107 | - attributemanifests 108 | - circonuses 109 | - deniers 110 | - fluentds 111 | - kubernetesenvs 112 | - listcheckers 113 | - memquotas 114 | - noops 115 | - opas 116 | - prometheuses 117 | - rbacs 118 | - solarwindses 119 | - stackdrivers 120 | - cloudwatches 121 | - dogstatsds 122 | - statsds 123 | - stdios 124 | - apikeys 125 | - authorizations 126 | - checknothings 127 | - listentries 128 | - logentries 129 | - metrics 130 | - quotas 131 | - reportnothings 132 | - tracespans 133 | scope: '*' 134 | sideEffects: Unknown 135 | timeoutSeconds: 30 -------------------------------------------------------------------------------- /chap-11/istio-galley.logs: -------------------------------------------------------------------------------- 1 | 2019-06-11T15:33:12.835396Z info Galley started with KubeConfig: 2 | ResyncPeriod: 0s 3 | APIAddress: tcp://0.0.0.0:9901 4 | EnableGrpcTracing: false 5 | MaxReceivedMessageSize: 1048576 6 | MaxConcurrentStreams: 1024 7 | IntrospectionOptions: {Port:9876 Address:127.0.0.1} 8 | Insecure: false 9 | AccessListFile: /etc/config/accesslist.yaml 10 | EnableServer: true 11 | KeyFile: /etc/certs/key.pem 12 | CertificateFile: /etc/certs/cert-chain.pem 13 | CACertificateFile: /etc/certs/root-cert.pem 14 | ConfigFilePath: 15 | MeshConfigFile: /etc/mesh-config/mesh 16 | DomainSuffix: cluster.local 17 | DisableResourceReadyCheck: false 18 | ExcludedResourceKinds: [Endpoints Node Pod Service] 19 | SinkAddress: 20 | SinkAuthMode: 21 | SinkMeta: [] 22 | 23 | 2019-06-11T15:33:12.835965Z info Galley validation started with 24 | DomainSuffix: 25 | Port: 443 26 | CertFile: /etc/certs/cert-chain.pem 27 | KeyFile: /etc/certs/key.pem 28 | WebhookConfigFile: /etc/config/validatingwebhookconfiguration.yaml 29 | CACertFile: /etc/certs/root-cert.pem 30 | DeploymentAndServiceNamespace: istio-system 31 | WebhookName: istio-galley 32 | DeploymentName: istio-galley 33 | ServiceName: istio-galley 34 | EnableValidation: true 35 | 36 | 2019-06-11T15:33:12.841210Z info meshconfig Reloaded mesh config: 37 | # Set the following variable to true to disable policy checks by the Mixer. 38 | # Note that metrics will still be reported to the Mixer. 39 | disablePolicyChecks: false 40 | 41 | # Set enableTracing to false to disable request tracing. 42 | enableTracing: true 43 | 44 | # Set accessLogFile to empty string to disable access log. 45 | accessLogFile: "/dev/stdout" 46 | 47 | # If accessLogEncoding is TEXT, value will be used directly as the log format 48 | # example: "[%START_TIME%] %REQ(:METHOD)% %REQ(X-ENVOY-ORIGINAL-PATH?:PATH)% %PROTOCOL%\n" 49 | # If AccessLogEncoding is JSON, value will be parsed as map[string]string 50 | # example: '{"start_time": "%START_TIME%", "req_method": "%REQ(:METHOD)%"}' 51 | # Leave empty to use default log format 52 | accessLogFormat: "" 53 | 54 | # Set accessLogEncoding to JSON or TEXT to configure sidecar access log 55 | accessLogEncoding: 'TEXT' 56 | mixerCheckServer: istio-policy.istio-system.svc.cluster.local:15004 57 | mixerReportServer: istio-telemetry.istio-system.svc.cluster.local:15004 58 | # policyCheckFailOpen allows traffic in cases when the mixer policy service cannot be reached. 59 | # Default is false which means the traffic is denied when the client is unable to connect to Mixer. 60 | policyCheckFailOpen: false 61 | # Let Pilot give ingresses the public IP of the Istio ingressgateway 62 | ingressService: istio-ingressgateway 63 | 64 | # Default connect timeout for dynamic clusters generated by Pilot and returned via XDS 65 | connectTimeout: 10s 66 | 67 | # DNS refresh rate for Envoy clusters of type STRICT_DNS 68 | dnsRefreshRate: 5s 69 | 70 | # Unix Domain Socket through which envoy communicates with NodeAgent SDS to get 71 | # key/cert for mTLS. Use secret-mount files instead of SDS if set to empty. 72 | sdsUdsPath: 73 | 74 | # This flag is used by secret discovery service(SDS). 75 | # If set to true(prerequisite: https://kubernetes.io/docs/concepts/storage/volumes/#projected), Istio will inject volumes mount 76 | # for k8s service account JWT, so that K8s API server mounts k8s service account JWT to envoy container, which 77 | # will be used to generate key/cert eventually. This isn't supported for non-k8s case. 78 | enableSdsTokenMount: false 79 | 80 | # This flag is used by secret discovery service(SDS). 81 | # If set to true, envoy will fetch normal k8s service account JWT from '/var/run/secrets/kubernetes.io/serviceaccount/token' 82 | # (https://kubernetes.io/docs/tasks/access-application-cluster/access-cluster/#accessing-the-api-from-a-pod) 83 | # and pass to sds server, which will be used to request key/cert eventually. 84 | # this flag is ignored if enableSdsTokenMount is set. 85 | # This isn't supported for non-k8s case. 86 | sdsUseK8sSaJwt: false 87 | 88 | # The trust domain corresponds to the trust root of a system. 89 | # Refer to https://github.com/spiffe/spiffe/blob/master/standards/SPIFFE-ID.md#21-trust-domain 90 | trustDomain: 91 | 92 | # Set the default behavior of the sidecar for handling outbound traffic from the application: 93 | # ALLOW_ANY - outbound traffic to unknown destinations will be allowed, in case there are no 94 | # services or ServiceEntries for the destination port 95 | # REGISTRY_ONLY - restrict outbound traffic to services defined in the service registry as well 96 | # as those defined through ServiceEntries 97 | outboundTrafficPolicy: 98 | mode: ALLOW_ANY 99 | 100 | localityLbSetting: 101 | {} 102 | 103 | 104 | # The namespace to treat as the administrative root namespace for istio 105 | # configuration. 106 | rootNamespace: istio-system 107 | configSources: 108 | - address: istio-galley.istio-system.svc:9901 109 | tlsSettings: 110 | mode: ISTIO_MUTUAL 111 | 112 | defaultConfig: 113 | # 114 | # TCP connection timeout between Envoy & the application, and between Envoys. Used for static clusters 115 | # defined in Envoy's configuration file 116 | connectTimeout: 10s 117 | # 118 | ### ADVANCED SETTINGS ############# 119 | # Where should envoy's configuration be stored in the istio-proxy container 120 | configPath: "/etc/istio/proxy" 121 | binaryPath: "/usr/local/bin/envoy" 122 | # The pseudo service name used for Envoy. 123 | serviceCluster: istio-proxy 124 | # These settings that determine how long an old Envoy 125 | # process should be kept alive after an occasional reload. 126 | drainDuration: 45s 127 | parentShutdownDuration: 1m0s 128 | # 129 | # The mode used to redirect inbound connections to Envoy. This setting 130 | # has no effect on outbound traffic: iptables REDIRECT is always used for 131 | # outbound connections. 132 | # If "REDIRECT", use iptables REDIRECT to NAT and redirect to Envoy. 133 | # The "REDIRECT" mode loses source addresses during redirection. 134 | # If "TPROXY", use iptables TPROXY to redirect to Envoy. 135 | # The "TPROXY" mode preserves both the source and destination IP 136 | # addresses and ports, so that they can be used for advanced filtering 137 | # and manipulation. 138 | # The "TPROXY" mode also configures the sidecar to run with the 139 | # CAP_NET_ADMIN capability, which is required to use TPROXY. 140 | #interceptionMode: REDIRECT 141 | # 142 | # Port where Envoy listens (on local host) for admin commands 143 | # You can exec into the istio-proxy container in a pod and 144 | # curl the admin port (curl http://localhost:15000/) to obtain 145 | # diagnostic information from Envoy. See 146 | # https://lyft.github.io/envoy/docs/operations/admin.html 147 | # for more details 148 | proxyAdminPort: 15000 149 | # 150 | # Set concurrency to a specific number to control the number of Proxy worker threads. 151 | # If set to 0 (default), then start worker thread for each CPU thread/core. 152 | concurrency: 2 153 | # 154 | tracing: 155 | zipkin: 156 | # Address of the Zipkin collector 157 | address: zipkin.istio-system:9411 158 | # 159 | # Mutual TLS authentication between sidecars and istio control plane. 160 | controlPlaneAuthPolicy: MUTUAL_TLS 161 | # 162 | # Address where istio Pilot service is running 163 | discoveryAddress: istio-pilot.istio-system:15011 164 | 165 | 2019-06-11T15:33:12.841471Z warn Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. 166 | 2019-06-11T15:33:14.935717Z info kube Discovered all supported resources (# = 54) 167 | 2019-06-11T15:33:14.935740Z info kube creating sources for kubernetes resources 168 | 2019-06-11T15:33:14.935744Z info kube [0] 169 | 2019-06-11T15:33:14.935747Z info kube Source: adapters.config.istio.io/v1alpha2 170 | 2019-06-11T15:33:14.935760Z info kube Collection: istio/config/v1alpha2/adapters 171 | 2019-06-11T15:33:14.935877Z info kube [1] 172 | 2019-06-11T15:33:14.935883Z info kube Source: apikeys.config.istio.io/v1alpha2 173 | 2019-06-11T15:33:14.935887Z info kube Collection: istio/config/v1alpha2/legacy/apikeys 174 | 2019-06-11T15:33:14.935893Z info kube [2] 175 | 2019-06-11T15:33:14.935897Z info kube Source: attributemanifests.config.istio.io/v1alpha2 176 | 2019-06-11T15:33:14.935902Z info kube Collection: istio/policy/v1beta1/attributemanifests 177 | 2019-06-11T15:33:14.935907Z info kube [3] 178 | 2019-06-11T15:33:14.935911Z info kube Source: authorizations.config.istio.io/v1alpha2 179 | 2019-06-11T15:33:14.935915Z info kube Collection: istio/config/v1alpha2/legacy/authorizations 180 | 2019-06-11T15:33:14.935919Z info kube [4] 181 | 2019-06-11T15:33:14.935923Z info kube Source: bypasses.config.istio.io/v1alpha2 182 | 2019-06-11T15:33:14.935928Z info kube Collection: istio/config/v1alpha2/legacy/bypasses 183 | 2019-06-11T15:33:14.935932Z info kube [5] 184 | 2019-06-11T15:33:14.935937Z info kube Source: checknothings.config.istio.io/v1alpha2 185 | 2019-06-11T15:33:14.935941Z info kube Collection: istio/config/v1alpha2/legacy/checknothings 186 | 2019-06-11T15:33:14.935944Z info kube [6] 187 | 2019-06-11T15:33:14.935947Z info kube Source: circonuses.config.istio.io/v1alpha2 188 | 2019-06-11T15:33:14.935950Z info kube Collection: istio/config/v1alpha2/legacy/circonuses 189 | 2019-06-11T15:33:14.935953Z info kube [7] 190 | 2019-06-11T15:33:14.935957Z info kube Source: cloudwatches.config.istio.io/v1alpha2 191 | 2019-06-11T15:33:14.935960Z info kube Collection: istio/config/v1alpha2/legacy/cloudwatches 192 | 2019-06-11T15:33:14.935963Z info kube [8] 193 | 2019-06-11T15:33:14.935966Z info kube Source: clusterrbacconfigs.rbac.istio.io/v1alpha1 194 | 2019-06-11T15:33:14.935969Z info kube Collection: istio/rbac/v1alpha1/clusterrbacconfigs 195 | 2019-06-11T15:33:14.935973Z info kube [9] 196 | 2019-06-11T15:33:14.935975Z info kube Source: deniers.config.istio.io/v1alpha2 197 | 2019-06-11T15:33:14.935978Z info kube Collection: istio/config/v1alpha2/legacy/deniers 198 | 2019-06-11T15:33:14.935981Z info kube [10] 199 | 2019-06-11T15:33:14.935984Z info kube Source: destinationrules.networking.istio.io/v1alpha3 200 | 2019-06-11T15:33:14.935987Z info kube Collection: istio/networking/v1alpha3/destinationrules 201 | 2019-06-11T15:33:14.935990Z info kube [11] 202 | 2019-06-11T15:33:14.935993Z info kube Source: dogstatsds.config.istio.io/v1alpha2 203 | 2019-06-11T15:33:14.935995Z info kube Collection: istio/config/v1alpha2/legacy/dogstatsds 204 | 2019-06-11T15:33:14.935998Z info kube [12] 205 | 2019-06-11T15:33:14.936001Z info kube Source: edges.config.istio.io/v1alpha2 206 | 2019-06-11T15:33:14.936004Z info kube Collection: istio/config/v1alpha2/legacy/edges 207 | 2019-06-11T15:33:14.936007Z info kube [13] 208 | 2019-06-11T15:33:14.936010Z info kube Source: envoyfilters.networking.istio.io/v1alpha3 209 | 2019-06-11T15:33:14.936012Z info kube Collection: istio/networking/v1alpha3/envoyfilters 210 | 2019-06-11T15:33:14.936015Z info kube [14] 211 | 2019-06-11T15:33:14.936018Z info kube Source: fluentds.config.istio.io/v1alpha2 212 | 2019-06-11T15:33:14.936020Z info kube Collection: istio/config/v1alpha2/legacy/fluentds 213 | 2019-06-11T15:33:14.936023Z info kube [15] 214 | 2019-06-11T15:33:14.936026Z info kube Source: gateways.networking.istio.io/v1alpha3 215 | 2019-06-11T15:33:14.936028Z info kube Collection: istio/networking/v1alpha3/gateways 216 | 2019-06-11T15:33:14.936034Z info kube [16] 217 | 2019-06-11T15:33:14.936038Z info kube Source: handlers.config.istio.io/v1alpha2 218 | 2019-06-11T15:33:14.936040Z info kube Collection: istio/policy/v1beta1/handlers 219 | 2019-06-11T15:33:14.936043Z info kube [17] 220 | 2019-06-11T15:33:14.936046Z info kube Source: httpapispecbindings.config.istio.io/v1alpha2 221 | 2019-06-11T15:33:14.936049Z info kube Collection: istio/config/v1alpha2/httpapispecbindings 222 | 2019-06-11T15:33:14.936052Z info kube [18] 223 | 2019-06-11T15:33:14.936055Z info kube Source: httpapispecs.config.istio.io/v1alpha2 224 | 2019-06-11T15:33:14.936057Z info kube Collection: istio/config/v1alpha2/httpapispecs 225 | 2019-06-11T15:33:14.936060Z info kube [19] 226 | 2019-06-11T15:33:14.936063Z info kube Source: ingresses.extensions/v1beta1 227 | 2019-06-11T15:33:14.936066Z info kube Collection: k8s/extensions/v1beta1/ingresses 228 | 2019-06-11T15:33:14.936069Z info kube [20] 229 | 2019-06-11T15:33:14.936072Z info kube Source: instances.config.istio.io/v1alpha2 230 | 2019-06-11T15:33:14.936075Z info kube Collection: istio/policy/v1beta1/instances 231 | 2019-06-11T15:33:14.936077Z info kube [21] 232 | 2019-06-11T15:33:14.936080Z info kube Source: kubernetesenvs.config.istio.io/v1alpha2 233 | 2019-06-11T15:33:14.936082Z info kube Collection: istio/config/v1alpha2/legacy/kubernetesenvs 234 | 2019-06-11T15:33:14.936085Z info kube [22] 235 | 2019-06-11T15:33:14.936088Z info kube Source: kuberneteses.config.istio.io/v1alpha2 236 | 2019-06-11T15:33:14.936090Z info kube Collection: istio/config/v1alpha2/legacy/kuberneteses 237 | 2019-06-11T15:33:14.936093Z info kube [23] 238 | 2019-06-11T15:33:14.936095Z info kube Source: listcheckers.config.istio.io/v1alpha2 239 | 2019-06-11T15:33:14.936098Z info kube Collection: istio/config/v1alpha2/legacy/listcheckers 240 | 2019-06-11T15:33:14.936101Z info kube [24] 241 | 2019-06-11T15:33:14.936104Z info kube Source: listentries.config.istio.io/v1alpha2 242 | 2019-06-11T15:33:14.936106Z info kube Collection: istio/config/v1alpha2/legacy/listentries 243 | 2019-06-11T15:33:14.936109Z info kube [25] 244 | 2019-06-11T15:33:14.936112Z info kube Source: logentries.config.istio.io/v1alpha2 245 | 2019-06-11T15:33:14.936115Z info kube Collection: istio/config/v1alpha2/legacy/logentries 246 | 2019-06-11T15:33:14.936118Z info kube [26] 247 | 2019-06-11T15:33:14.936121Z info kube Source: memquotas.config.istio.io/v1alpha2 248 | 2019-06-11T15:33:14.936123Z info kube Collection: istio/config/v1alpha2/legacy/memquotas 249 | 2019-06-11T15:33:14.936126Z info kube [27] 250 | 2019-06-11T15:33:14.936128Z info kube Source: meshpolicies.authentication.istio.io/v1alpha1 251 | 2019-06-11T15:33:14.936131Z info kube Collection: istio/authentication/v1alpha1/meshpolicies 252 | 2019-06-11T15:33:14.936133Z info kube [28] 253 | 2019-06-11T15:33:14.936136Z info kube Source: metrics.config.istio.io/v1alpha2 254 | 2019-06-11T15:33:14.936138Z info kube Collection: istio/config/v1alpha2/legacy/metrics 255 | 2019-06-11T15:33:14.936141Z info kube [29] 256 | 2019-06-11T15:33:14.936144Z info kube Source: noops.config.istio.io/v1alpha2 257 | 2019-06-11T15:33:14.936147Z info kube Collection: istio/config/v1alpha2/legacy/noops 258 | 2019-06-11T15:33:14.936150Z info kube [30] 259 | 2019-06-11T15:33:14.936153Z info kube Source: opas.config.istio.io/v1alpha2 260 | 2019-06-11T15:33:14.936155Z info kube Collection: istio/config/v1alpha2/legacy/opas 261 | 2019-06-11T15:33:14.936158Z info kube [31] 262 | 2019-06-11T15:33:14.936161Z info kube Source: policies.authentication.istio.io/v1alpha1 263 | 2019-06-11T15:33:14.936164Z info kube Collection: istio/authentication/v1alpha1/policies 264 | 2019-06-11T15:33:14.936167Z info kube [32] 265 | 2019-06-11T15:33:14.936169Z info kube Source: prometheuses.config.istio.io/v1alpha2 266 | 2019-06-11T15:33:14.936176Z info kube Collection: istio/config/v1alpha2/legacy/prometheuses 267 | 2019-06-11T15:33:14.936181Z info kube [33] 268 | 2019-06-11T15:33:14.936184Z info kube Source: quotas.config.istio.io/v1alpha2 269 | 2019-06-11T15:33:14.936187Z info kube Collection: istio/config/v1alpha2/legacy/quotas 270 | 2019-06-11T15:33:14.936190Z info kube [34] 271 | 2019-06-11T15:33:14.936193Z info kube Source: quotaspecbindings.config.istio.io/v1alpha2 272 | 2019-06-11T15:33:14.936196Z info kube Collection: istio/mixer/v1/config/client/quotaspecbindings 273 | 2019-06-11T15:33:14.936199Z info kube [35] 274 | 2019-06-11T15:33:14.936202Z info kube Source: quotaspecs.config.istio.io/v1alpha2 275 | 2019-06-11T15:33:14.936205Z info kube Collection: istio/mixer/v1/config/client/quotaspecs 276 | 2019-06-11T15:33:14.936208Z info kube [36] 277 | 2019-06-11T15:33:14.936211Z info kube Source: rbacconfigs.rbac.istio.io/v1alpha1 278 | 2019-06-11T15:33:14.936213Z info kube Collection: istio/rbac/v1alpha1/rbacconfigs 279 | 2019-06-11T15:33:14.936216Z info kube [37] 280 | 2019-06-11T15:33:14.936219Z info kube Source: rbacs.config.istio.io/v1alpha2 281 | 2019-06-11T15:33:14.936221Z info kube Collection: istio/config/v1alpha2/legacy/rbacs 282 | 2019-06-11T15:33:14.936224Z info kube [38] 283 | 2019-06-11T15:33:14.936227Z info kube Source: redisquotas.config.istio.io/v1alpha2 284 | 2019-06-11T15:33:14.936229Z info kube Collection: istio/config/v1alpha2/legacy/redisquotas 285 | 2019-06-11T15:33:14.936232Z info kube [39] 286 | 2019-06-11T15:33:14.936235Z info kube Source: reportnothings.config.istio.io/v1alpha2 287 | 2019-06-11T15:33:14.936237Z info kube Collection: istio/config/v1alpha2/legacy/reportnothings 288 | 2019-06-11T15:33:14.936240Z info kube [40] 289 | 2019-06-11T15:33:14.936243Z info kube Source: rules.config.istio.io/v1alpha2 290 | 2019-06-11T15:33:14.936245Z info kube Collection: istio/policy/v1beta1/rules 291 | 2019-06-11T15:33:14.936248Z info kube [41] 292 | 2019-06-11T15:33:14.936251Z info kube Source: serviceentries.networking.istio.io/v1alpha3 293 | 2019-06-11T15:33:14.936253Z info kube Collection: istio/networking/v1alpha3/serviceentries 294 | 2019-06-11T15:33:14.936256Z info kube [42] 295 | 2019-06-11T15:33:14.936259Z info kube Source: servicerolebindings.rbac.istio.io/v1alpha1 296 | 2019-06-11T15:33:14.936261Z info kube Collection: istio/rbac/v1alpha1/servicerolebindings 297 | 2019-06-11T15:33:14.936264Z info kube [43] 298 | 2019-06-11T15:33:14.936267Z info kube Source: serviceroles.rbac.istio.io/v1alpha1 299 | 2019-06-11T15:33:14.936269Z info kube Collection: istio/rbac/v1alpha1/serviceroles 300 | 2019-06-11T15:33:14.936272Z info kube [44] 301 | 2019-06-11T15:33:14.936275Z info kube Source: sidecars.networking.istio.io/v1alpha3 302 | 2019-06-11T15:33:14.936277Z info kube Collection: istio/networking/v1alpha3/sidecars 303 | 2019-06-11T15:33:14.936281Z info kube [45] 304 | 2019-06-11T15:33:14.936283Z info kube Source: signalfxs.config.istio.io/v1alpha2 305 | 2019-06-11T15:33:14.936286Z info kube Collection: istio/config/v1alpha2/legacy/signalfxs 306 | 2019-06-11T15:33:14.936288Z info kube [46] 307 | 2019-06-11T15:33:14.936291Z info kube Source: solarwindses.config.istio.io/v1alpha2 308 | 2019-06-11T15:33:14.936293Z info kube Collection: istio/config/v1alpha2/legacy/solarwindses 309 | 2019-06-11T15:33:14.936296Z info kube [47] 310 | 2019-06-11T15:33:14.936299Z info kube Source: stackdrivers.config.istio.io/v1alpha2 311 | 2019-06-11T15:33:14.936301Z info kube Collection: istio/config/v1alpha2/legacy/stackdrivers 312 | 2019-06-11T15:33:14.936304Z info kube [48] 313 | 2019-06-11T15:33:14.936307Z info kube Source: statsds.config.istio.io/v1alpha2 314 | 2019-06-11T15:33:14.936309Z info kube Collection: istio/config/v1alpha2/legacy/statsds 315 | 2019-06-11T15:33:14.936313Z info kube [49] 316 | 2019-06-11T15:33:14.936316Z info kube Source: stdios.config.istio.io/v1alpha2 317 | 2019-06-11T15:33:14.936319Z info kube Collection: istio/config/v1alpha2/legacy/stdios 318 | 2019-06-11T15:33:14.936321Z info kube [50] 319 | 2019-06-11T15:33:14.936324Z info kube Source: templates.config.istio.io/v1alpha2 320 | 2019-06-11T15:33:14.936326Z info kube Collection: istio/config/v1alpha2/templates 321 | 2019-06-11T15:33:14.936329Z info kube [51] 322 | 2019-06-11T15:33:14.936332Z info kube Source: tracespans.config.istio.io/v1alpha2 323 | 2019-06-11T15:33:14.936334Z info kube Collection: istio/config/v1alpha2/legacy/tracespans 324 | 2019-06-11T15:33:14.936337Z info kube [52] 325 | 2019-06-11T15:33:14.936339Z info kube Source: virtualservices.networking.istio.io/v1alpha3 326 | 2019-06-11T15:33:14.936342Z info kube Collection: istio/networking/v1alpha3/virtualservices 327 | 2019-06-11T15:33:14.936344Z info kube [53] 328 | 2019-06-11T15:33:14.936347Z info kube Source: zipkins.config.istio.io/v1alpha2 329 | 2019-06-11T15:33:14.936349Z info kube Collection: istio/config/v1alpha2/legacy/zipkins 330 | 2019-06-11T15:33:14.938614Z info Istio Galley: root@341b3bf0-76ac-11e9-b644-0a580a2c0404-docker.io/istio-1.1.7-eec7a74473deee98cad0a996f41a32a47dd453c2-dirty-Modified 331 | Starting gRPC server on tcp://0.0.0.0:9901 332 | 2019-06-11T15:33:14.938636Z info runtime Starting processor... 333 | 2019-06-11T15:33:14.950334Z info ControlZ available at 10.32.0.32:9876 334 | 2019-06-11T15:33:15.883477Z info validation Checking if istio-system/istio-galley is ready before registering webhook configuration 335 | 2019-06-11T15:33:15.883837Z info validation https handler for validation webhook is not ready: HTTP request to https://127.0.0.1:443/ready failed: Get https://127.0.0.1:443/ready: dial tcp 127.0.0.1:443: connect: connection refused 336 | 2019-06-11T15:33:15.984872Z warn validation istio-system/istio-galley endpoint not ready: no ready addresses 337 | 2019-06-11T15:33:16.888514Z info validation https handler for validation webhook is ready 338 | 2019-06-11T15:33:21.412814Z info validation Endpoint istio-system/istio-galley is ready 339 | 2019-06-11T15:33:21.414636Z info validation istio-galley validatingwebhookconfiguration (re)loaded: 340 | apiVersion: admissionregistration.k8s.io/v1beta1 341 | kind: ValidatingWebhookConfiguration 342 | metadata: 343 | creationTimestamp: null 344 | labels: 345 | app: galley 346 | chart: galley 347 | heritage: Tiller 348 | istio: galley 349 | release: istio 350 | name: istio-galley 351 | namespace: istio-system 352 | ownerReferences: 353 | - apiVersion: extensions/v1beta1 354 | blockOwnerDeletion: true 355 | controller: true 356 | kind: Deployment 357 | name: istio-galley 358 | uid: 243d2a39-8883-11e9-a548-00505698ee31 359 | webhooks: 360 | - clientConfig: 361 | caBundle: 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 362 | service: 363 | name: istio-galley 364 | namespace: istio-system 365 | path: /admitpilot 366 | failurePolicy: Fail 367 | name: pilot.validation.istio.io 368 | namespaceSelector: {} 369 | rules: 370 | - apiGroups: 371 | - config.istio.io 372 | apiVersions: 373 | - v1alpha2 374 | operations: 375 | - CREATE 376 | - UPDATE 377 | resources: 378 | - httpapispecs 379 | - httpapispecbindings 380 | - quotaspecs 381 | - quotaspecbindings 382 | - apiGroups: 383 | - rbac.istio.io 384 | apiVersions: 385 | - '*' 386 | operations: 387 | - CREATE 388 | - UPDATE 389 | resources: 390 | - '*' 391 | - apiGroups: 392 | - authentication.istio.io 393 | apiVersions: 394 | - '*' 395 | operations: 396 | - CREATE 397 | - UPDATE 398 | resources: 399 | - '*' 400 | - apiGroups: 401 | - networking.istio.io 402 | apiVersions: 403 | - '*' 404 | operations: 405 | - CREATE 406 | - UPDATE 407 | resources: 408 | - destinationrules 409 | - envoyfilters 410 | - gateways 411 | - serviceentries 412 | - sidecars 413 | - virtualservices 414 | - clientConfig: 415 | caBundle: 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 416 | service: 417 | name: istio-galley 418 | namespace: istio-system 419 | path: /admitmixer 420 | failurePolicy: Fail 421 | name: mixer.validation.istio.io 422 | namespaceSelector: {} 423 | rules: 424 | - apiGroups: 425 | - config.istio.io 426 | apiVersions: 427 | - v1alpha2 428 | operations: 429 | - CREATE 430 | - UPDATE 431 | resources: 432 | - rules 433 | - attributemanifests 434 | - circonuses 435 | - deniers 436 | - fluentds 437 | - kubernetesenvs 438 | - listcheckers 439 | - memquotas 440 | - noops 441 | - opas 442 | - prometheuses 443 | - rbacs 444 | - solarwindses 445 | - stackdrivers 446 | - cloudwatches 447 | - dogstatsds 448 | - statsds 449 | - stdios 450 | - apikeys 451 | - authorizations 452 | - checknothings 453 | - listentries 454 | - logentries 455 | - metrics 456 | - quotas 457 | - reportnothings 458 | - tracespans 459 | 460 | 2019-06-11T15:33:21.428688Z info validation istio-galley validatingwebhookconfiguration updated 461 | 2019-06-11T15:33:22.416253Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: NEW (ResourceSource), supported collections: []string{"istio/config/v1alpha2/legacy/reportnothings", "istio/networking/v1alpha3/virtualservices", "k8s/core/v1/endpoints", "istio/config/v1alpha2/legacy/checknothings", "istio/config/v1alpha2/legacy/dogstatsds", "istio/networking/v1alpha3/serviceentries", "istio/policy/v1beta1/attributemanifests", "istio/config/v1alpha2/httpapispecbindings", "istio/config/v1alpha2/legacy/fluentds", "istio/mixer/v1/config/client/quotaspecbindings", "istio/policy/v1beta1/handlers", "istio/config/v1alpha2/legacy/authorizations", "istio/config/v1alpha2/legacy/listentries", "istio/config/v1alpha2/legacy/circonuses", "istio/config/v1alpha2/legacy/deniers", "istio/config/v1alpha2/templates", "istio/rbac/v1alpha1/clusterrbacconfigs", "istio/policy/v1beta1/instances", "istio/rbac/v1alpha1/servicerolebindings", "istio/config/v1alpha2/legacy/memquotas", "istio/config/v1alpha2/adapters", "istio/config/v1alpha2/legacy/apikeys", "istio/config/v1alpha2/legacy/edges", "istio/config/v1alpha2/legacy/rbacs", "istio/config/v1alpha2/legacy/stackdrivers", "istio/config/v1alpha2/legacy/statsds", "istio/rbac/v1alpha1/rbacconfigs", "k8s/extensions/v1beta1/ingresses", "istio/config/v1alpha2/httpapispecs", "istio/config/v1alpha2/legacy/redisquotas", "istio/authentication/v1alpha1/policies", "istio/config/v1alpha2/legacy/kubernetesenvs", "istio/config/v1alpha2/legacy/noops", "istio/mixer/v1/config/client/quotaspecs", "istio/rbac/v1alpha1/serviceroles", "istio/config/v1alpha2/legacy/kuberneteses", "istio/config/v1alpha2/legacy/listcheckers", "istio/config/v1alpha2/legacy/opas", "istio/config/v1alpha2/legacy/zipkins", "k8s/core/v1/nodes", "k8s/core/v1/pods", "istio/config/v1alpha2/legacy/signalfxs", "istio/networking/v1alpha3/envoyfilters", "istio/authentication/v1alpha1/meshpolicies", "istio/config/v1alpha2/legacy/bypasses", "istio/config/v1alpha2/legacy/logentries", "istio/config/v1alpha2/legacy/solarwindses", "istio/config/v1alpha2/legacy/stdios", "istio/networking/v1alpha3/gateways", "istio/config/v1alpha2/legacy/cloudwatches", "istio/config/v1alpha2/legacy/quotas", "istio/networking/v1alpha3/destinationrules", "istio/networking/v1alpha3/sidecars", "k8s/core/v1/services", "istio/config/v1alpha2/legacy/metrics", "istio/config/v1alpha2/legacy/prometheuses", "istio/config/v1alpha2/legacy/tracespans", "istio/policy/v1beta1/rules"} 462 | 2019-06-11T15:33:22.416342Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/bypasses 463 | 2019-06-11T15:33:22.416352Z info mcp Watch(): created watch 1 for istio/config/v1alpha2/legacy/bypasses from group "default", version "" 464 | 2019-06-11T15:33:22.416360Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/listentries 465 | 2019-06-11T15:33:22.416364Z info mcp Watch(): created watch 2 for istio/config/v1alpha2/legacy/listentries from group "default", version "" 466 | 2019-06-11T15:33:22.416375Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/policy/v1beta1/instances 467 | 2019-06-11T15:33:22.416378Z info mcp Watch(): created watch 3 for istio/policy/v1beta1/instances from group "default", version "" 468 | 2019-06-11T15:33:22.416384Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/adapters 469 | 2019-06-11T15:33:22.416387Z info mcp Watch(): created watch 4 for istio/config/v1alpha2/adapters from group "default", version "" 470 | 2019-06-11T15:33:22.416398Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/authorizations 471 | 2019-06-11T15:33:22.416402Z info mcp Watch(): created watch 5 for istio/config/v1alpha2/legacy/authorizations from group "default", version "" 472 | 2019-06-11T15:33:22.416410Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/redisquotas 473 | 2019-06-11T15:33:22.416416Z info mcp Watch(): created watch 6 for istio/config/v1alpha2/legacy/redisquotas from group "default", version "" 474 | 2019-06-11T15:33:22.416428Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/stackdrivers 475 | 2019-06-11T15:33:22.416432Z info mcp Watch(): created watch 7 for istio/config/v1alpha2/legacy/stackdrivers from group "default", version "" 476 | 2019-06-11T15:33:22.416439Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/deniers 477 | 2019-06-11T15:33:22.416443Z info mcp Watch(): created watch 8 for istio/config/v1alpha2/legacy/deniers from group "default", version "" 478 | 2019-06-11T15:33:22.416453Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/noops 479 | 2019-06-11T15:33:22.416456Z info mcp Watch(): created watch 9 for istio/config/v1alpha2/legacy/noops from group "default", version "" 480 | 2019-06-11T15:33:22.416464Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/reportnothings 481 | 2019-06-11T15:33:22.416467Z info mcp Watch(): created watch 10 for istio/config/v1alpha2/legacy/reportnothings from group "default", version "" 482 | 2019-06-11T15:33:22.416480Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/stdios 483 | 2019-06-11T15:33:22.416484Z info mcp Watch(): created watch 11 for istio/config/v1alpha2/legacy/stdios from group "default", version "" 484 | 2019-06-11T15:33:22.416489Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/dogstatsds 485 | 2019-06-11T15:33:22.416493Z info mcp Watch(): created watch 12 for istio/config/v1alpha2/legacy/dogstatsds from group "default", version "" 486 | 2019-06-11T15:33:22.416506Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/kubernetesenvs 487 | 2019-06-11T15:33:22.416511Z info mcp Watch(): created watch 13 for istio/config/v1alpha2/legacy/kubernetesenvs from group "default", version "" 488 | 2019-06-11T15:33:22.416516Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/statsds 489 | 2019-06-11T15:33:22.416519Z info mcp Watch(): created watch 14 for istio/config/v1alpha2/legacy/statsds from group "default", version "" 490 | 2019-06-11T15:33:22.416530Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/policy/v1beta1/handlers 491 | 2019-06-11T15:33:22.416533Z info mcp Watch(): created watch 15 for istio/policy/v1beta1/handlers from group "default", version "" 492 | 2019-06-11T15:33:22.416539Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/signalfxs 493 | 2019-06-11T15:33:22.416542Z info mcp Watch(): created watch 16 for istio/config/v1alpha2/legacy/signalfxs from group "default", version "" 494 | 2019-06-11T15:33:22.416550Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/prometheuses 495 | 2019-06-11T15:33:22.416553Z info mcp Watch(): created watch 17 for istio/config/v1alpha2/legacy/prometheuses from group "default", version "" 496 | 2019-06-11T15:33:22.416559Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/cloudwatches 497 | 2019-06-11T15:33:22.416562Z info mcp Watch(): created watch 18 for istio/config/v1alpha2/legacy/cloudwatches from group "default", version "" 498 | 2019-06-11T15:33:22.416574Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/fluentds 499 | 2019-06-11T15:33:22.416578Z info mcp Watch(): created watch 19 for istio/config/v1alpha2/legacy/fluentds from group "default", version "" 500 | 2019-06-11T15:33:22.416584Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/metrics 501 | 2019-06-11T15:33:22.416587Z info mcp Watch(): created watch 20 for istio/config/v1alpha2/legacy/metrics from group "default", version "" 502 | 2019-06-11T15:33:22.416596Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/checknothings 503 | 2019-06-11T15:33:22.416600Z info mcp Watch(): created watch 21 for istio/config/v1alpha2/legacy/checknothings from group "default", version "" 504 | 2019-06-11T15:33:22.416605Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/tracespans 505 | 2019-06-11T15:33:22.416608Z info mcp Watch(): created watch 22 for istio/config/v1alpha2/legacy/tracespans from group "default", version "" 506 | 2019-06-11T15:33:22.416617Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/apikeys 507 | 2019-06-11T15:33:22.416620Z info mcp Watch(): created watch 23 for istio/config/v1alpha2/legacy/apikeys from group "default", version "" 508 | 2019-06-11T15:33:22.416625Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/zipkins 509 | 2019-06-11T15:33:22.416628Z info mcp Watch(): created watch 24 for istio/config/v1alpha2/legacy/zipkins from group "default", version "" 510 | 2019-06-11T15:33:22.416636Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/listcheckers 511 | 2019-06-11T15:33:22.416639Z info mcp Watch(): created watch 25 for istio/config/v1alpha2/legacy/listcheckers from group "default", version "" 512 | 2019-06-11T15:33:22.416644Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/solarwindses 513 | 2019-06-11T15:33:22.416647Z info mcp Watch(): created watch 26 for istio/config/v1alpha2/legacy/solarwindses from group "default", version "" 514 | 2019-06-11T15:33:22.416654Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/logentries 515 | 2019-06-11T15:33:22.416658Z info mcp Watch(): created watch 27 for istio/config/v1alpha2/legacy/logentries from group "default", version "" 516 | 2019-06-11T15:33:22.416665Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/kuberneteses 517 | 2019-06-11T15:33:22.416668Z info mcp Watch(): created watch 28 for istio/config/v1alpha2/legacy/kuberneteses from group "default", version "" 518 | 2019-06-11T15:33:22.416677Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/rbacs 519 | 2019-06-11T15:33:22.416681Z info mcp Watch(): created watch 29 for istio/config/v1alpha2/legacy/rbacs from group "default", version "" 520 | 2019-06-11T15:33:22.416686Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/quotas 521 | 2019-06-11T15:33:22.416689Z info mcp Watch(): created watch 30 for istio/config/v1alpha2/legacy/quotas from group "default", version "" 522 | 2019-06-11T15:33:22.416698Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/templates 523 | 2019-06-11T15:33:22.416701Z info mcp Watch(): created watch 31 for istio/config/v1alpha2/templates from group "default", version "" 524 | 2019-06-11T15:33:22.416707Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/policy/v1beta1/rules 525 | 2019-06-11T15:33:22.416710Z info mcp Watch(): created watch 32 for istio/policy/v1beta1/rules from group "default", version "" 526 | 2019-06-11T15:33:22.416719Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/policy/v1beta1/attributemanifests 527 | 2019-06-11T15:33:22.416722Z info mcp Watch(): created watch 33 for istio/policy/v1beta1/attributemanifests from group "default", version "" 528 | 2019-06-11T15:33:22.416734Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/circonuses 529 | 2019-06-11T15:33:22.416739Z info mcp Watch(): created watch 34 for istio/config/v1alpha2/legacy/circonuses from group "default", version "" 530 | 2019-06-11T15:33:22.416748Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/edges 531 | 2019-06-11T15:33:22.416751Z info mcp Watch(): created watch 35 for istio/config/v1alpha2/legacy/edges from group "default", version "" 532 | 2019-06-11T15:33:22.416757Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/opas 533 | 2019-06-11T15:33:22.416761Z info mcp Watch(): created watch 36 for istio/config/v1alpha2/legacy/opas from group "default", version "" 534 | 2019-06-11T15:33:22.416771Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1}: inc=false WATCH for istio/config/v1alpha2/legacy/memquotas 535 | 2019-06-11T15:33:22.416774Z info mcp Watch(): created watch 37 for istio/config/v1alpha2/legacy/memquotas from group "default", version "" 536 | 2019-06-11T15:33:22.525076Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: NEW (ResourceSource), supported collections: []string{"istio/config/v1alpha2/legacy/reportnothings", "istio/networking/v1alpha3/virtualservices", "k8s/core/v1/endpoints", "istio/config/v1alpha2/legacy/checknothings", "istio/config/v1alpha2/legacy/dogstatsds", "istio/networking/v1alpha3/serviceentries", "istio/policy/v1beta1/attributemanifests", "istio/config/v1alpha2/httpapispecbindings", "istio/config/v1alpha2/legacy/fluentds", "istio/mixer/v1/config/client/quotaspecbindings", "istio/policy/v1beta1/handlers", "istio/config/v1alpha2/legacy/authorizations", "istio/config/v1alpha2/legacy/listentries", "istio/config/v1alpha2/legacy/circonuses", "istio/config/v1alpha2/legacy/deniers", "istio/config/v1alpha2/templates", "istio/rbac/v1alpha1/clusterrbacconfigs", "istio/policy/v1beta1/instances", "istio/rbac/v1alpha1/servicerolebindings", "istio/config/v1alpha2/legacy/memquotas", "istio/config/v1alpha2/adapters", "istio/config/v1alpha2/legacy/apikeys", "istio/config/v1alpha2/legacy/edges", "istio/config/v1alpha2/legacy/rbacs", "istio/config/v1alpha2/legacy/stackdrivers", "istio/config/v1alpha2/legacy/statsds", "istio/rbac/v1alpha1/rbacconfigs", "k8s/extensions/v1beta1/ingresses", "istio/config/v1alpha2/httpapispecs", "istio/config/v1alpha2/legacy/redisquotas", "istio/authentication/v1alpha1/policies", "istio/config/v1alpha2/legacy/kubernetesenvs", "istio/config/v1alpha2/legacy/noops", "istio/mixer/v1/config/client/quotaspecs", "istio/rbac/v1alpha1/serviceroles", "istio/config/v1alpha2/legacy/kuberneteses", "istio/config/v1alpha2/legacy/listcheckers", "istio/config/v1alpha2/legacy/opas", "istio/config/v1alpha2/legacy/zipkins", "k8s/core/v1/nodes", "k8s/core/v1/pods", "istio/config/v1alpha2/legacy/signalfxs", "istio/networking/v1alpha3/envoyfilters", "istio/authentication/v1alpha1/meshpolicies", "istio/config/v1alpha2/legacy/bypasses", "istio/config/v1alpha2/legacy/logentries", "istio/config/v1alpha2/legacy/solarwindses", "istio/config/v1alpha2/legacy/stdios", "istio/networking/v1alpha3/gateways", "istio/config/v1alpha2/legacy/cloudwatches", "istio/config/v1alpha2/legacy/quotas", "istio/networking/v1alpha3/destinationrules", "istio/networking/v1alpha3/sidecars", "k8s/core/v1/services", "istio/config/v1alpha2/legacy/metrics", "istio/config/v1alpha2/legacy/prometheuses", "istio/config/v1alpha2/legacy/tracespans", "istio/policy/v1beta1/rules"} 537 | 2019-06-11T15:33:22.525125Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/reportnothings 538 | 2019-06-11T15:33:22.525135Z info mcp Watch(): created watch 38 for istio/config/v1alpha2/legacy/reportnothings from group "default", version "" 539 | 2019-06-11T15:33:22.525143Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/policy/v1beta1/instances 540 | 2019-06-11T15:33:22.525149Z info mcp Watch(): created watch 39 for istio/policy/v1beta1/instances from group "default", version "" 541 | 2019-06-11T15:33:22.525159Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/kuberneteses 542 | 2019-06-11T15:33:22.525164Z info mcp Watch(): created watch 40 for istio/config/v1alpha2/legacy/kuberneteses from group "default", version "" 543 | 2019-06-11T15:33:22.525170Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/redisquotas 544 | 2019-06-11T15:33:22.525175Z info mcp Watch(): created watch 41 for istio/config/v1alpha2/legacy/redisquotas from group "default", version "" 545 | 2019-06-11T15:33:22.525185Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/policy/v1beta1/handlers 546 | 2019-06-11T15:33:22.525190Z info mcp Watch(): created watch 42 for istio/policy/v1beta1/handlers from group "default", version "" 547 | 2019-06-11T15:33:22.525195Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/cloudwatches 548 | 2019-06-11T15:33:22.525202Z info mcp Watch(): created watch 43 for istio/config/v1alpha2/legacy/cloudwatches from group "default", version "" 549 | 2019-06-11T15:33:22.525211Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/bypasses 550 | 2019-06-11T15:33:22.525214Z info mcp Watch(): created watch 44 for istio/config/v1alpha2/legacy/bypasses from group "default", version "" 551 | 2019-06-11T15:33:22.525220Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/checknothings 552 | 2019-06-11T15:33:22.525225Z info mcp Watch(): created watch 45 for istio/config/v1alpha2/legacy/checknothings from group "default", version "" 553 | 2019-06-11T15:33:22.525233Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/authorizations 554 | 2019-06-11T15:33:22.525238Z info mcp Watch(): created watch 46 for istio/config/v1alpha2/legacy/authorizations from group "default", version "" 555 | 2019-06-11T15:33:22.525244Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/metrics 556 | 2019-06-11T15:33:22.525247Z info mcp Watch(): created watch 47 for istio/config/v1alpha2/legacy/metrics from group "default", version "" 557 | 2019-06-11T15:33:22.525256Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/circonuses 558 | 2019-06-11T15:33:22.525261Z info mcp Watch(): created watch 48 for istio/config/v1alpha2/legacy/circonuses from group "default", version "" 559 | 2019-06-11T15:33:22.525266Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/edges 560 | 2019-06-11T15:33:22.525269Z info mcp Watch(): created watch 49 for istio/config/v1alpha2/legacy/edges from group "default", version "" 561 | 2019-06-11T15:33:22.525279Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/policy/v1beta1/attributemanifests 562 | 2019-06-11T15:33:22.525283Z info mcp Watch(): created watch 50 for istio/policy/v1beta1/attributemanifests from group "default", version "" 563 | 2019-06-11T15:33:22.525290Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/dogstatsds 564 | 2019-06-11T15:33:22.525296Z info mcp Watch(): created watch 51 for istio/config/v1alpha2/legacy/dogstatsds from group "default", version "" 565 | 2019-06-11T15:33:22.525312Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/memquotas 566 | 2019-06-11T15:33:22.525321Z info mcp Watch(): created watch 52 for istio/config/v1alpha2/legacy/memquotas from group "default", version "" 567 | 2019-06-11T15:33:22.525331Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/solarwindses 568 | 2019-06-11T15:33:22.525339Z info mcp Watch(): created watch 53 for istio/config/v1alpha2/legacy/solarwindses from group "default", version "" 569 | 2019-06-11T15:33:22.525355Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/listentries 570 | 2019-06-11T15:33:22.525361Z info mcp Watch(): created watch 54 for istio/config/v1alpha2/legacy/listentries from group "default", version "" 571 | 2019-06-11T15:33:22.525367Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/zipkins 572 | 2019-06-11T15:33:22.525373Z info mcp Watch(): created watch 55 for istio/config/v1alpha2/legacy/zipkins from group "default", version "" 573 | 2019-06-11T15:33:22.525383Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/deniers 574 | 2019-06-11T15:33:22.525386Z info mcp Watch(): created watch 56 for istio/config/v1alpha2/legacy/deniers from group "default", version "" 575 | 2019-06-11T15:33:22.525392Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/noops 576 | 2019-06-11T15:33:22.525397Z info mcp Watch(): created watch 57 for istio/config/v1alpha2/legacy/noops from group "default", version "" 577 | 2019-06-11T15:33:22.525407Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/apikeys 578 | 2019-06-11T15:33:22.525411Z info mcp Watch(): created watch 58 for istio/config/v1alpha2/legacy/apikeys from group "default", version "" 579 | 2019-06-11T15:33:22.525416Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/logentries 580 | 2019-06-11T15:33:22.525421Z info mcp Watch(): created watch 59 for istio/config/v1alpha2/legacy/logentries from group "default", version "" 581 | 2019-06-11T15:33:22.525430Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/adapters 582 | 2019-06-11T15:33:22.525435Z info mcp Watch(): created watch 60 for istio/config/v1alpha2/adapters from group "default", version "" 583 | 2019-06-11T15:33:22.525450Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/quotas 584 | 2019-06-11T15:33:22.525453Z info mcp Watch(): created watch 61 for istio/config/v1alpha2/legacy/quotas from group "default", version "" 585 | 2019-06-11T15:33:22.525462Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/tracespans 586 | 2019-06-11T15:33:22.525465Z info mcp Watch(): created watch 62 for istio/config/v1alpha2/legacy/tracespans from group "default", version "" 587 | 2019-06-11T15:33:22.525470Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/policy/v1beta1/rules 588 | 2019-06-11T15:33:22.525474Z info mcp Watch(): created watch 63 for istio/policy/v1beta1/rules from group "default", version "" 589 | 2019-06-11T15:33:22.525484Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/listcheckers 590 | 2019-06-11T15:33:22.525487Z info mcp Watch(): created watch 64 for istio/config/v1alpha2/legacy/listcheckers from group "default", version "" 591 | 2019-06-11T15:33:22.525492Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/signalfxs 592 | 2019-06-11T15:33:22.525496Z info mcp Watch(): created watch 65 for istio/config/v1alpha2/legacy/signalfxs from group "default", version "" 593 | 2019-06-11T15:33:22.525507Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/fluentds 594 | 2019-06-11T15:33:22.525511Z info mcp Watch(): created watch 66 for istio/config/v1alpha2/legacy/fluentds from group "default", version "" 595 | 2019-06-11T15:33:22.525516Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/kubernetesenvs 596 | 2019-06-11T15:33:22.525520Z info mcp Watch(): created watch 67 for istio/config/v1alpha2/legacy/kubernetesenvs from group "default", version "" 597 | 2019-06-11T15:33:22.525528Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/rbacs 598 | 2019-06-11T15:33:22.525533Z info mcp Watch(): created watch 68 for istio/config/v1alpha2/legacy/rbacs from group "default", version "" 599 | 2019-06-11T15:33:22.525539Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/opas 600 | 2019-06-11T15:33:22.525542Z info mcp Watch(): created watch 69 for istio/config/v1alpha2/legacy/opas from group "default", version "" 601 | 2019-06-11T15:33:22.525550Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/templates 602 | 2019-06-11T15:33:22.525553Z info mcp Watch(): created watch 70 for istio/config/v1alpha2/templates from group "default", version "" 603 | 2019-06-11T15:33:22.525559Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/stackdrivers 604 | 2019-06-11T15:33:22.525562Z info mcp Watch(): created watch 71 for istio/config/v1alpha2/legacy/stackdrivers from group "default", version "" 605 | 2019-06-11T15:33:22.525571Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/prometheuses 606 | 2019-06-11T15:33:22.525574Z info mcp Watch(): created watch 72 for istio/config/v1alpha2/legacy/prometheuses from group "default", version "" 607 | 2019-06-11T15:33:22.525580Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/statsds 608 | 2019-06-11T15:33:22.525583Z info mcp Watch(): created watch 73 for istio/config/v1alpha2/legacy/statsds from group "default", version "" 609 | 2019-06-11T15:33:22.525590Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2}: inc=false WATCH for istio/config/v1alpha2/legacy/stdios 610 | 2019-06-11T15:33:22.525594Z info mcp Watch(): created watch 74 for istio/config/v1alpha2/legacy/stdios from group "default", version "" 611 | 2019-06-11T15:33:23.754698Z info runtime Synchronization is complete, starting distribution. 612 | 2019-06-11T15:33:24.755032Z info mcp SetSnapshot(): respond to watch 24 for istio/config/v1alpha2/legacy/zipkins @ version "0" 613 | 2019-06-11T15:33:24.755210Z info mcp SetSnapshot(): respond to watch 50 for istio/policy/v1beta1/attributemanifests @ version "14" 614 | 2019-06-11T15:33:24.755403Z info mcp SetSnapshot(): respond to watch 30 for istio/config/v1alpha2/legacy/quotas @ version "0" 615 | 2019-06-11T15:33:24.755561Z info mcp SetSnapshot(): respond to watch 31 for istio/config/v1alpha2/templates @ version "0" 616 | 2019-06-11T15:33:24.755595Z info mcp SetSnapshot(): respond to watch 44 for istio/config/v1alpha2/legacy/bypasses @ version "0" 617 | 2019-06-11T15:33:24.755827Z info mcp SetSnapshot(): respond to watch 67 for istio/config/v1alpha2/legacy/kubernetesenvs @ version "0" 618 | 2019-06-11T15:33:24.755906Z info mcp SetSnapshot(): respond to watch 70 for istio/config/v1alpha2/templates @ version "0" 619 | 2019-06-11T15:33:24.755949Z info mcp SetSnapshot(): respond to watch 74 for istio/config/v1alpha2/legacy/stdios @ version "0" 620 | 2019-06-11T15:33:24.756122Z info mcp SetSnapshot(): respond to watch 23 for istio/config/v1alpha2/legacy/apikeys @ version "0" 621 | 2019-06-11T15:33:24.756153Z info mcp SetSnapshot(): respond to watch 29 for istio/config/v1alpha2/legacy/rbacs @ version "0" 622 | 2019-06-11T15:33:24.756191Z info mcp SetSnapshot(): respond to watch 36 for istio/config/v1alpha2/legacy/opas @ version "0" 623 | 2019-06-11T15:33:24.756257Z info mcp SetSnapshot(): respond to watch 39 for istio/policy/v1beta1/instances @ version "0" 624 | 2019-06-11T15:33:24.756318Z info mcp SetSnapshot(): respond to watch 46 for istio/config/v1alpha2/legacy/authorizations @ version "0" 625 | 2019-06-11T15:33:24.756516Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/zipkins with version="0" nonce="1" inc=false 626 | 2019-06-11T15:33:24.756532Z info mcp SetSnapshot(): respond to watch 8 for istio/config/v1alpha2/legacy/deniers @ version "0" 627 | 2019-06-11T15:33:24.756561Z info mcp SetSnapshot(): respond to watch 13 for istio/config/v1alpha2/legacy/kubernetesenvs @ version "0" 628 | 2019-06-11T15:33:24.756566Z info mcp SetSnapshot(): respond to watch 22 for istio/config/v1alpha2/legacy/tracespans @ version "0" 629 | 2019-06-11T15:33:24.756570Z info mcp SetSnapshot(): respond to watch 43 for istio/config/v1alpha2/legacy/cloudwatches @ version "0" 630 | 2019-06-11T15:33:24.756574Z info mcp SetSnapshot(): respond to watch 35 for istio/config/v1alpha2/legacy/edges @ version "0" 631 | 2019-06-11T15:33:24.756578Z info mcp SetSnapshot(): respond to watch 73 for istio/config/v1alpha2/legacy/statsds @ version "0" 632 | 2019-06-11T15:33:24.756582Z info mcp SetSnapshot(): respond to watch 56 for istio/config/v1alpha2/legacy/deniers @ version "0" 633 | 2019-06-11T15:33:24.756586Z info mcp SetSnapshot(): respond to watch 58 for istio/config/v1alpha2/legacy/apikeys @ version "0" 634 | 2019-06-11T15:33:24.756591Z info mcp SetSnapshot(): respond to watch 64 for istio/config/v1alpha2/legacy/listcheckers @ version "0" 635 | 2019-06-11T15:33:24.756595Z info mcp SetSnapshot(): respond to watch 20 for istio/config/v1alpha2/legacy/metrics @ version "10" 636 | 2019-06-11T15:33:24.756599Z info mcp SetSnapshot(): respond to watch 26 for istio/config/v1alpha2/legacy/solarwindses @ version "0" 637 | 2019-06-11T15:33:24.756603Z info mcp SetSnapshot(): respond to watch 40 for istio/config/v1alpha2/legacy/kuberneteses @ version "2" 638 | 2019-06-11T15:33:24.756606Z info mcp SetSnapshot(): respond to watch 45 for istio/config/v1alpha2/legacy/checknothings @ version "0" 639 | 2019-06-11T15:33:24.756610Z info mcp SetSnapshot(): respond to watch 47 for istio/config/v1alpha2/legacy/metrics @ version "10" 640 | 2019-06-11T15:33:24.756614Z info mcp SetSnapshot(): respond to watch 4 for istio/config/v1alpha2/adapters @ version "0" 641 | 2019-06-11T15:33:24.756618Z info mcp SetSnapshot(): respond to watch 15 for istio/policy/v1beta1/handlers @ version "26" 642 | 2019-06-11T15:33:24.756622Z info mcp SetSnapshot(): respond to watch 17 for istio/config/v1alpha2/legacy/prometheuses @ version "0" 643 | 2019-06-11T15:33:24.756626Z info mcp SetSnapshot(): respond to watch 68 for istio/config/v1alpha2/legacy/rbacs @ version "0" 644 | 2019-06-11T15:33:24.756629Z info mcp SetSnapshot(): respond to watch 42 for istio/policy/v1beta1/handlers @ version "26" 645 | 2019-06-11T15:33:24.756633Z info mcp SetSnapshot(): respond to watch 51 for istio/config/v1alpha2/legacy/dogstatsds @ version "0" 646 | 2019-06-11T15:33:24.756637Z info mcp SetSnapshot(): respond to watch 54 for istio/config/v1alpha2/legacy/listentries @ version "0" 647 | 2019-06-11T15:33:24.756644Z info mcp SetSnapshot(): respond to watch 3 for istio/policy/v1beta1/instances @ version "0" 648 | 2019-06-11T15:33:24.756651Z info mcp SetSnapshot(): respond to watch 9 for istio/config/v1alpha2/legacy/noops @ version "0" 649 | 2019-06-11T15:33:24.756657Z info mcp SetSnapshot(): respond to watch 21 for istio/config/v1alpha2/legacy/checknothings @ version "0" 650 | 2019-06-11T15:33:24.756664Z info mcp SetSnapshot(): respond to watch 27 for istio/config/v1alpha2/legacy/logentries @ version "12" 651 | 2019-06-11T15:33:24.756670Z info mcp SetSnapshot(): respond to watch 32 for istio/policy/v1beta1/rules @ version "40" 652 | 2019-06-11T15:33:24.756676Z info mcp SetSnapshot(): respond to watch 65 for istio/config/v1alpha2/legacy/signalfxs @ version "0" 653 | 2019-06-11T15:33:24.756682Z info mcp SetSnapshot(): respond to watch 7 for istio/config/v1alpha2/legacy/stackdrivers @ version "0" 654 | 2019-06-11T15:33:24.756688Z info mcp SetSnapshot(): respond to watch 18 for istio/config/v1alpha2/legacy/cloudwatches @ version "0" 655 | 2019-06-11T15:33:24.756693Z info mcp SetSnapshot(): respond to watch 19 for istio/config/v1alpha2/legacy/fluentds @ version "0" 656 | 2019-06-11T15:33:24.756699Z info mcp SetSnapshot(): respond to watch 33 for istio/policy/v1beta1/attributemanifests @ version "14" 657 | 2019-06-11T15:33:24.756709Z info mcp SetSnapshot(): respond to watch 71 for istio/config/v1alpha2/legacy/stackdrivers @ version "0" 658 | 2019-06-11T15:33:24.756714Z info mcp SetSnapshot(): respond to watch 1 for istio/config/v1alpha2/legacy/bypasses @ version "0" 659 | 2019-06-11T15:33:24.756724Z info mcp SetSnapshot(): respond to watch 14 for istio/config/v1alpha2/legacy/statsds @ version "0" 660 | 2019-06-11T15:33:24.756729Z info mcp SetSnapshot(): respond to watch 41 for istio/config/v1alpha2/legacy/redisquotas @ version "0" 661 | 2019-06-11T15:33:24.756735Z info mcp SetSnapshot(): respond to watch 53 for istio/config/v1alpha2/legacy/solarwindses @ version "0" 662 | 2019-06-11T15:33:24.756748Z info mcp SetSnapshot(): respond to watch 60 for istio/config/v1alpha2/adapters @ version "0" 663 | 2019-06-11T15:33:24.756754Z info mcp SetSnapshot(): respond to watch 10 for istio/config/v1alpha2/legacy/reportnothings @ version "0" 664 | 2019-06-11T15:33:24.756759Z info mcp SetSnapshot(): respond to watch 25 for istio/config/v1alpha2/legacy/listcheckers @ version "0" 665 | 2019-06-11T15:33:24.756764Z info mcp SetSnapshot(): respond to watch 28 for istio/config/v1alpha2/legacy/kuberneteses @ version "2" 666 | 2019-06-11T15:33:24.756769Z info mcp SetSnapshot(): respond to watch 55 for istio/config/v1alpha2/legacy/zipkins @ version "0" 667 | 2019-06-11T15:33:24.756775Z info mcp SetSnapshot(): respond to watch 2 for istio/config/v1alpha2/legacy/listentries @ version "0" 668 | 2019-06-11T15:33:24.756780Z info mcp SetSnapshot(): respond to watch 16 for istio/config/v1alpha2/legacy/signalfxs @ version "0" 669 | 2019-06-11T15:33:24.756786Z info mcp SetSnapshot(): respond to watch 48 for istio/config/v1alpha2/legacy/circonuses @ version "0" 670 | 2019-06-11T15:33:24.756791Z info mcp SetSnapshot(): respond to watch 52 for istio/config/v1alpha2/legacy/memquotas @ version "0" 671 | 2019-06-11T15:33:24.756797Z info mcp SetSnapshot(): respond to watch 63 for istio/policy/v1beta1/rules @ version "40" 672 | 2019-06-11T15:33:24.756802Z info mcp SetSnapshot(): respond to watch 37 for istio/config/v1alpha2/legacy/memquotas @ version "0" 673 | 2019-06-11T15:33:24.756808Z info mcp SetSnapshot(): respond to watch 59 for istio/config/v1alpha2/legacy/logentries @ version "12" 674 | 2019-06-11T15:33:24.756813Z info mcp SetSnapshot(): respond to watch 66 for istio/config/v1alpha2/legacy/fluentds @ version "0" 675 | 2019-06-11T15:33:24.756829Z info mcp SetSnapshot(): respond to watch 12 for istio/config/v1alpha2/legacy/dogstatsds @ version "0" 676 | 2019-06-11T15:33:24.756836Z info mcp SetSnapshot(): respond to watch 38 for istio/config/v1alpha2/legacy/reportnothings @ version "0" 677 | 2019-06-11T15:33:24.756842Z info mcp SetSnapshot(): respond to watch 57 for istio/config/v1alpha2/legacy/noops @ version "0" 678 | 2019-06-11T15:33:24.756847Z info mcp SetSnapshot(): respond to watch 62 for istio/config/v1alpha2/legacy/tracespans @ version "0" 679 | 2019-06-11T15:33:24.756852Z info mcp SetSnapshot(): respond to watch 72 for istio/config/v1alpha2/legacy/prometheuses @ version "0" 680 | 2019-06-11T15:33:24.756858Z info mcp SetSnapshot(): respond to watch 6 for istio/config/v1alpha2/legacy/redisquotas @ version "0" 681 | 2019-06-11T15:33:24.756863Z info mcp SetSnapshot(): respond to watch 11 for istio/config/v1alpha2/legacy/stdios @ version "0" 682 | 2019-06-11T15:33:24.756868Z info mcp SetSnapshot(): respond to watch 69 for istio/config/v1alpha2/legacy/opas @ version "0" 683 | 2019-06-11T15:33:24.756874Z info mcp SetSnapshot(): respond to watch 5 for istio/config/v1alpha2/legacy/authorizations @ version "0" 684 | 2019-06-11T15:33:24.756883Z info mcp SetSnapshot(): respond to watch 34 for istio/config/v1alpha2/legacy/circonuses @ version "0" 685 | 2019-06-11T15:33:24.756888Z info mcp SetSnapshot(): respond to watch 49 for istio/config/v1alpha2/legacy/edges @ version "0" 686 | 2019-06-11T15:33:24.756893Z info mcp SetSnapshot(): respond to watch 61 for istio/config/v1alpha2/legacy/quotas @ version "0" 687 | 2019-06-11T15:33:24.756913Z info mcp Watch(): created watch 75 for istio/config/v1alpha2/legacy/zipkins from group "default", version "0" 688 | 2019-06-11T15:33:24.756942Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/quotas with version="0" nonce="2" inc=false 689 | 2019-06-11T15:33:24.756958Z info mcp Watch(): created watch 76 for istio/config/v1alpha2/legacy/quotas from group "default", version "0" 690 | 2019-06-11T15:33:24.757204Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/templates with version="0" nonce="3" inc=false 691 | 2019-06-11T15:33:24.757215Z info mcp Watch(): created watch 77 for istio/config/v1alpha2/templates from group "default", version "0" 692 | 2019-06-11T15:33:24.759811Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/policy/v1beta1/attributemanifests with version="14" nonce="1" inc=false 693 | 2019-06-11T15:33:24.759844Z info mcp Watch(): created watch 78 for istio/policy/v1beta1/attributemanifests from group "default", version "14" 694 | 2019-06-11T15:33:24.759886Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/bypasses with version="0" nonce="2" inc=false 695 | 2019-06-11T15:33:24.759967Z info mcp Watch(): created watch 79 for istio/config/v1alpha2/legacy/bypasses from group "default", version "0" 696 | 2019-06-11T15:33:24.759992Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/kubernetesenvs with version="0" nonce="3" inc=false 697 | 2019-06-11T15:33:24.760079Z info mcp Watch(): created watch 80 for istio/config/v1alpha2/legacy/kubernetesenvs from group "default", version "0" 698 | 2019-06-11T15:33:24.760093Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/templates with version="0" nonce="4" inc=false 699 | 2019-06-11T15:33:24.760129Z info mcp Watch(): created watch 81 for istio/config/v1alpha2/templates from group "default", version "0" 700 | 2019-06-11T15:33:24.762112Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/stdios with version="0" nonce="5" inc=false 701 | 2019-06-11T15:33:24.762128Z info mcp Watch(): created watch 82 for istio/config/v1alpha2/legacy/stdios from group "default", version "0" 702 | 2019-06-11T15:33:24.762138Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/policy/v1beta1/instances with version="0" nonce="6" inc=false 703 | 2019-06-11T15:33:24.762147Z info mcp Watch(): created watch 83 for istio/policy/v1beta1/instances from group "default", version "0" 704 | 2019-06-11T15:33:24.762273Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/authorizations with version="0" nonce="7" inc=false 705 | 2019-06-11T15:33:24.762288Z info mcp Watch(): created watch 84 for istio/config/v1alpha2/legacy/authorizations from group "default", version "0" 706 | 2019-06-11T15:33:24.762297Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/cloudwatches with version="0" nonce="8" inc=false 707 | 2019-06-11T15:33:24.762302Z info mcp Watch(): created watch 85 for istio/config/v1alpha2/legacy/cloudwatches from group "default", version "0" 708 | 2019-06-11T15:33:24.762394Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/apikeys with version="0" nonce="4" inc=false 709 | 2019-06-11T15:33:24.762485Z info mcp Watch(): created watch 86 for istio/config/v1alpha2/legacy/apikeys from group "default", version "0" 710 | 2019-06-11T15:33:24.762422Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/statsds with version="0" nonce="9" inc=false 711 | 2019-06-11T15:33:24.762575Z info mcp Watch(): created watch 87 for istio/config/v1alpha2/legacy/statsds from group "default", version "0" 712 | 2019-06-11T15:33:24.762586Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/deniers with version="0" nonce="10" inc=false 713 | 2019-06-11T15:33:24.762648Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/rbacs with version="0" nonce="5" inc=false 714 | 2019-06-11T15:33:24.762799Z info mcp Watch(): created watch 88 for istio/config/v1alpha2/legacy/deniers from group "default", version "0" 715 | 2019-06-11T15:33:24.762837Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/apikeys with version="0" nonce="11" inc=false 716 | 2019-06-11T15:33:24.763025Z info mcp Watch(): created watch 89 for istio/config/v1alpha2/legacy/apikeys from group "default", version "0" 717 | 2019-06-11T15:33:24.763041Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/listcheckers with version="0" nonce="12" inc=false 718 | 2019-06-11T15:33:24.763051Z info mcp Watch(): created watch 90 for istio/config/v1alpha2/legacy/listcheckers from group "default", version "0" 719 | 2019-06-11T15:33:24.763089Z info mcp Watch(): created watch 91 for istio/config/v1alpha2/legacy/rbacs from group "default", version "0" 720 | 2019-06-11T15:33:24.763166Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/opas with version="0" nonce="6" inc=false 721 | 2019-06-11T15:33:24.763179Z info mcp Watch(): created watch 92 for istio/config/v1alpha2/legacy/opas from group "default", version "0" 722 | 2019-06-11T15:33:24.763229Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/kuberneteses with version="2" nonce="13" inc=false 723 | 2019-06-11T15:33:24.763245Z info mcp Watch(): created watch 93 for istio/config/v1alpha2/legacy/kuberneteses from group "default", version "2" 724 | 2019-06-11T15:33:24.763323Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/deniers with version="0" nonce="7" inc=false 725 | 2019-06-11T15:33:24.763392Z info mcp Watch(): created watch 94 for istio/config/v1alpha2/legacy/deniers from group "default", version "0" 726 | 2019-06-11T15:33:24.763425Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/kubernetesenvs with version="0" nonce="8" inc=false 727 | 2019-06-11T15:33:24.763526Z info mcp Watch(): created watch 95 for istio/config/v1alpha2/legacy/kubernetesenvs from group "default", version "0" 728 | 2019-06-11T15:33:24.763558Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/tracespans with version="0" nonce="9" inc=false 729 | 2019-06-11T15:33:24.763603Z info mcp Watch(): created watch 96 for istio/config/v1alpha2/legacy/tracespans from group "default", version "0" 730 | 2019-06-11T15:33:24.763683Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/edges with version="0" nonce="10" inc=false 731 | 2019-06-11T15:33:24.763760Z info mcp Watch(): created watch 97 for istio/config/v1alpha2/legacy/edges from group "default", version "0" 732 | 2019-06-11T15:33:24.763324Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/checknothings with version="0" nonce="14" inc=false 733 | 2019-06-11T15:33:24.763860Z info mcp Watch(): created watch 98 for istio/config/v1alpha2/legacy/checknothings from group "default", version "0" 734 | 2019-06-11T15:33:24.763922Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/metrics with version="10" nonce="15" inc=false 735 | 2019-06-11T15:33:24.764003Z info mcp Watch(): created watch 99 for istio/config/v1alpha2/legacy/metrics from group "default", version "10" 736 | 2019-06-11T15:33:24.764043Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/rbacs with version="0" nonce="16" inc=false 737 | 2019-06-11T15:33:24.764124Z info mcp Watch(): created watch 100 for istio/config/v1alpha2/legacy/rbacs from group "default", version "0" 738 | 2019-06-11T15:33:24.764178Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/policy/v1beta1/handlers with version="26" nonce="17" inc=false 739 | 2019-06-11T15:33:24.764247Z info mcp Watch(): created watch 101 for istio/policy/v1beta1/handlers from group "default", version "26" 740 | 2019-06-11T15:33:24.764325Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/dogstatsds with version="0" nonce="18" inc=false 741 | 2019-06-11T15:33:24.764388Z info mcp Watch(): created watch 102 for istio/config/v1alpha2/legacy/dogstatsds from group "default", version "0" 742 | 2019-06-11T15:33:24.764458Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/listentries with version="0" nonce="19" inc=false 743 | 2019-06-11T15:33:24.764525Z info mcp Watch(): created watch 103 for istio/config/v1alpha2/legacy/listentries from group "default", version "0" 744 | 2019-06-11T15:33:24.764558Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/signalfxs with version="0" nonce="20" inc=false 745 | 2019-06-11T15:33:24.764601Z info mcp Watch(): created watch 104 for istio/config/v1alpha2/legacy/signalfxs from group "default", version "0" 746 | 2019-06-11T15:33:24.764672Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/stackdrivers with version="0" nonce="21" inc=false 747 | 2019-06-11T15:33:24.764734Z info mcp Watch(): created watch 105 for istio/config/v1alpha2/legacy/stackdrivers from group "default", version "0" 748 | 2019-06-11T15:33:24.764799Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/redisquotas with version="0" nonce="22" inc=false 749 | 2019-06-11T15:33:24.764869Z info mcp Watch(): created watch 106 for istio/config/v1alpha2/legacy/redisquotas from group "default", version "0" 750 | 2019-06-11T15:33:24.764902Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/solarwindses with version="0" nonce="23" inc=false 751 | 2019-06-11T15:33:24.764974Z info mcp Watch(): created watch 107 for istio/config/v1alpha2/legacy/solarwindses from group "default", version "0" 752 | 2019-06-11T15:33:24.765033Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/adapters with version="0" nonce="24" inc=false 753 | 2019-06-11T15:33:24.765100Z info mcp Watch(): created watch 108 for istio/config/v1alpha2/adapters from group "default", version "0" 754 | 2019-06-11T15:33:24.765178Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/zipkins with version="0" nonce="25" inc=false 755 | 2019-06-11T15:33:24.765211Z info mcp Watch(): created watch 109 for istio/config/v1alpha2/legacy/zipkins from group "default", version "0" 756 | 2019-06-11T15:33:24.765262Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/circonuses with version="0" nonce="26" inc=false 757 | 2019-06-11T15:33:24.765313Z info mcp Watch(): created watch 110 for istio/config/v1alpha2/legacy/circonuses from group "default", version "0" 758 | 2019-06-11T15:33:24.765398Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/memquotas with version="0" nonce="27" inc=false 759 | 2019-06-11T15:33:24.765449Z info mcp Watch(): created watch 111 for istio/config/v1alpha2/legacy/memquotas from group "default", version "0" 760 | 2019-06-11T15:33:24.765521Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/policy/v1beta1/rules with version="40" nonce="28" inc=false 761 | 2019-06-11T15:33:24.765553Z info mcp Watch(): created watch 112 for istio/policy/v1beta1/rules from group "default", version "40" 762 | 2019-06-11T15:33:24.813453Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/logentries with version="12" nonce="29" inc=false 763 | 2019-06-11T15:33:24.813484Z info mcp Watch(): created watch 113 for istio/config/v1alpha2/legacy/logentries from group "default", version "12" 764 | 2019-06-11T15:33:24.813495Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/fluentds with version="0" nonce="30" inc=false 765 | 2019-06-11T15:33:24.813501Z info mcp Watch(): created watch 114 for istio/config/v1alpha2/legacy/fluentds from group "default", version "0" 766 | 2019-06-11T15:33:24.813513Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/reportnothings with version="0" nonce="31" inc=false 767 | 2019-06-11T15:33:24.813519Z info mcp Watch(): created watch 115 for istio/config/v1alpha2/legacy/reportnothings from group "default", version "0" 768 | 2019-06-11T15:33:24.813709Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/noops with version="0" nonce="32" inc=false 769 | 2019-06-11T15:33:24.813740Z info mcp Watch(): created watch 116 for istio/config/v1alpha2/legacy/noops from group "default", version "0" 770 | 2019-06-11T15:33:24.813811Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/tracespans with version="0" nonce="33" inc=false 771 | 2019-06-11T15:33:24.813830Z info mcp Watch(): created watch 117 for istio/config/v1alpha2/legacy/tracespans from group "default", version "0" 772 | 2019-06-11T15:33:24.813850Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/prometheuses with version="0" nonce="34" inc=false 773 | 2019-06-11T15:33:24.813857Z info mcp Watch(): created watch 118 for istio/config/v1alpha2/legacy/prometheuses from group "default", version "0" 774 | 2019-06-11T15:33:24.813869Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/opas with version="0" nonce="35" inc=false 775 | 2019-06-11T15:33:24.813875Z info mcp Watch(): created watch 119 for istio/config/v1alpha2/legacy/opas from group "default", version "0" 776 | 2019-06-11T15:33:24.813881Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/edges with version="0" nonce="36" inc=false 777 | 2019-06-11T15:33:24.813880Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/metrics with version="10" nonce="11" inc=false 778 | 2019-06-11T15:33:24.813887Z info mcp Watch(): created watch 120 for istio/config/v1alpha2/legacy/edges from group "default", version "0" 779 | 2019-06-11T15:33:24.813900Z info mcp MCP: connection {addr=10.32.0.28:59350 id=2} ACK collection=istio/config/v1alpha2/legacy/quotas with version="0" nonce="37" inc=false 780 | 2019-06-11T15:33:24.813916Z info mcp Watch(): created watch 121 for istio/config/v1alpha2/legacy/quotas from group "default", version "0" 781 | 2019-06-11T15:33:24.813981Z info mcp Watch(): created watch 122 for istio/config/v1alpha2/legacy/metrics from group "default", version "10" 782 | 2019-06-11T15:33:24.814027Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/solarwindses with version="0" nonce="12" inc=false 783 | 2019-06-11T15:33:24.814035Z info mcp Watch(): created watch 123 for istio/config/v1alpha2/legacy/solarwindses from group "default", version "0" 784 | 2019-06-11T15:33:24.814110Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/adapters with version="0" nonce="13" inc=false 785 | 2019-06-11T15:33:24.814122Z info mcp Watch(): created watch 124 for istio/config/v1alpha2/adapters from group "default", version "0" 786 | 2019-06-11T15:33:24.814155Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/policy/v1beta1/handlers with version="26" nonce="14" inc=false 787 | 2019-06-11T15:33:24.814233Z info mcp Watch(): created watch 125 for istio/policy/v1beta1/handlers from group "default", version "26" 788 | 2019-06-11T15:33:24.814253Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/prometheuses with version="0" nonce="15" inc=false 789 | 2019-06-11T15:33:24.814308Z info mcp Watch(): created watch 126 for istio/config/v1alpha2/legacy/prometheuses from group "default", version "0" 790 | 2019-06-11T15:33:24.814317Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/policy/v1beta1/instances with version="0" nonce="16" inc=false 791 | 2019-06-11T15:33:24.814322Z info mcp Watch(): created watch 127 for istio/policy/v1beta1/instances from group "default", version "0" 792 | 2019-06-11T15:33:24.814334Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/noops with version="0" nonce="17" inc=false 793 | 2019-06-11T15:33:24.814338Z info mcp Watch(): created watch 128 for istio/config/v1alpha2/legacy/noops from group "default", version "0" 794 | 2019-06-11T15:33:24.814368Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/checknothings with version="0" nonce="18" inc=false 795 | 2019-06-11T15:33:24.814376Z info mcp Watch(): created watch 129 for istio/config/v1alpha2/legacy/checknothings from group "default", version "0" 796 | 2019-06-11T15:33:24.814448Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/logentries with version="12" nonce="19" inc=false 797 | 2019-06-11T15:33:24.814462Z info mcp Watch(): created watch 130 for istio/config/v1alpha2/legacy/logentries from group "default", version "12" 798 | 2019-06-11T15:33:24.816269Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/policy/v1beta1/rules with version="40" nonce="20" inc=false 799 | 2019-06-11T15:33:24.816299Z info mcp Watch(): created watch 131 for istio/policy/v1beta1/rules from group "default", version "40" 800 | 2019-06-11T15:33:24.816336Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/stackdrivers with version="0" nonce="21" inc=false 801 | 2019-06-11T15:33:24.816419Z info mcp Watch(): created watch 132 for istio/config/v1alpha2/legacy/stackdrivers from group "default", version "0" 802 | 2019-06-11T15:33:24.816451Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/cloudwatches with version="0" nonce="22" inc=false 803 | 2019-06-11T15:33:24.816461Z info mcp Watch(): created watch 133 for istio/config/v1alpha2/legacy/cloudwatches from group "default", version "0" 804 | 2019-06-11T15:33:24.816551Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/fluentds with version="0" nonce="23" inc=false 805 | 2019-06-11T15:33:24.816562Z info mcp Watch(): created watch 134 for istio/config/v1alpha2/legacy/fluentds from group "default", version "0" 806 | 2019-06-11T15:33:24.816569Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/policy/v1beta1/attributemanifests with version="14" nonce="24" inc=false 807 | 2019-06-11T15:33:24.816574Z info mcp Watch(): created watch 135 for istio/policy/v1beta1/attributemanifests from group "default", version "14" 808 | 2019-06-11T15:33:24.816630Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/bypasses with version="0" nonce="25" inc=false 809 | 2019-06-11T15:33:24.816689Z info mcp Watch(): created watch 136 for istio/config/v1alpha2/legacy/bypasses from group "default", version "0" 810 | 2019-06-11T15:33:24.816705Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/statsds with version="0" nonce="26" inc=false 811 | 2019-06-11T15:33:24.816732Z info mcp Watch(): created watch 137 for istio/config/v1alpha2/legacy/statsds from group "default", version "0" 812 | 2019-06-11T15:33:24.816918Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/reportnothings with version="0" nonce="27" inc=false 813 | 2019-06-11T15:33:24.816932Z info mcp Watch(): created watch 138 for istio/config/v1alpha2/legacy/reportnothings from group "default", version "0" 814 | 2019-06-11T15:33:24.825898Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/listcheckers with version="0" nonce="28" inc=false 815 | 2019-06-11T15:33:24.825980Z info mcp Watch(): created watch 139 for istio/config/v1alpha2/legacy/listcheckers from group "default", version "0" 816 | 2019-06-11T15:33:24.826070Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/kuberneteses with version="2" nonce="29" inc=false 817 | 2019-06-11T15:33:24.826098Z info mcp Watch(): created watch 140 for istio/config/v1alpha2/legacy/kuberneteses from group "default", version "2" 818 | 2019-06-11T15:33:24.826157Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/listentries with version="0" nonce="30" inc=false 819 | 2019-06-11T15:33:24.826248Z info mcp Watch(): created watch 141 for istio/config/v1alpha2/legacy/listentries from group "default", version "0" 820 | 2019-06-11T15:33:24.826316Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/signalfxs with version="0" nonce="31" inc=false 821 | 2019-06-11T15:33:24.831848Z info mcp Watch(): created watch 142 for istio/config/v1alpha2/legacy/signalfxs from group "default", version "0" 822 | 2019-06-11T15:33:24.837170Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/memquotas with version="0" nonce="32" inc=false 823 | 2019-06-11T15:33:24.839634Z info mcp Watch(): created watch 143 for istio/config/v1alpha2/legacy/memquotas from group "default", version "0" 824 | 2019-06-11T15:33:24.839713Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/dogstatsds with version="0" nonce="33" inc=false 825 | 2019-06-11T15:33:24.839835Z info mcp Watch(): created watch 144 for istio/config/v1alpha2/legacy/dogstatsds from group "default", version "0" 826 | 2019-06-11T15:33:24.839913Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/redisquotas with version="0" nonce="34" inc=false 827 | 2019-06-11T15:33:24.840009Z info mcp Watch(): created watch 145 for istio/config/v1alpha2/legacy/redisquotas from group "default", version "0" 828 | 2019-06-11T15:33:24.840082Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/stdios with version="0" nonce="35" inc=false 829 | 2019-06-11T15:33:24.840175Z info mcp Watch(): created watch 146 for istio/config/v1alpha2/legacy/stdios from group "default", version "0" 830 | 2019-06-11T15:33:24.840255Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/authorizations with version="0" nonce="36" inc=false 831 | 2019-06-11T15:33:24.840287Z info mcp Watch(): created watch 147 for istio/config/v1alpha2/legacy/authorizations from group "default", version "0" 832 | 2019-06-11T15:33:24.840677Z info mcp MCP: connection {addr=10.32.0.26:47342 id=1} ACK collection=istio/config/v1alpha2/legacy/circonuses with version="0" nonce="37" inc=false 833 | 2019-06-11T15:33:24.840733Z info mcp Watch(): created watch 148 for istio/config/v1alpha2/legacy/circonuses from group "default", version "0" 834 | 2019-06-11T15:33:33.518276Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: NEW (ResourceSource), supported collections: []string{"istio/config/v1alpha2/legacy/reportnothings", "istio/networking/v1alpha3/virtualservices", "k8s/core/v1/endpoints", "istio/config/v1alpha2/legacy/checknothings", "istio/config/v1alpha2/legacy/dogstatsds", "istio/networking/v1alpha3/serviceentries", "istio/policy/v1beta1/attributemanifests", "istio/config/v1alpha2/httpapispecbindings", "istio/config/v1alpha2/legacy/fluentds", "istio/mixer/v1/config/client/quotaspecbindings", "istio/policy/v1beta1/handlers", "istio/config/v1alpha2/legacy/authorizations", "istio/config/v1alpha2/legacy/listentries", "istio/config/v1alpha2/legacy/circonuses", "istio/config/v1alpha2/legacy/deniers", "istio/config/v1alpha2/templates", "istio/rbac/v1alpha1/clusterrbacconfigs", "istio/policy/v1beta1/instances", "istio/rbac/v1alpha1/servicerolebindings", "istio/config/v1alpha2/legacy/memquotas", "istio/config/v1alpha2/adapters", "istio/config/v1alpha2/legacy/apikeys", "istio/config/v1alpha2/legacy/edges", "istio/config/v1alpha2/legacy/rbacs", "istio/config/v1alpha2/legacy/stackdrivers", "istio/config/v1alpha2/legacy/statsds", "istio/rbac/v1alpha1/rbacconfigs", "k8s/extensions/v1beta1/ingresses", "istio/config/v1alpha2/httpapispecs", "istio/config/v1alpha2/legacy/redisquotas", "istio/authentication/v1alpha1/policies", "istio/config/v1alpha2/legacy/kubernetesenvs", "istio/config/v1alpha2/legacy/noops", "istio/mixer/v1/config/client/quotaspecs", "istio/rbac/v1alpha1/serviceroles", "istio/config/v1alpha2/legacy/kuberneteses", "istio/config/v1alpha2/legacy/listcheckers", "istio/config/v1alpha2/legacy/opas", "istio/config/v1alpha2/legacy/zipkins", "k8s/core/v1/nodes", "k8s/core/v1/pods", "istio/config/v1alpha2/legacy/signalfxs", "istio/networking/v1alpha3/envoyfilters", "istio/authentication/v1alpha1/meshpolicies", "istio/config/v1alpha2/legacy/bypasses", "istio/config/v1alpha2/legacy/logentries", "istio/config/v1alpha2/legacy/solarwindses", "istio/config/v1alpha2/legacy/stdios", "istio/networking/v1alpha3/gateways", "istio/config/v1alpha2/legacy/cloudwatches", "istio/config/v1alpha2/legacy/quotas", "istio/networking/v1alpha3/destinationrules", "istio/networking/v1alpha3/sidecars", "k8s/core/v1/services", "istio/config/v1alpha2/legacy/metrics", "istio/config/v1alpha2/legacy/prometheuses", "istio/config/v1alpha2/legacy/tracespans", "istio/policy/v1beta1/rules"} 835 | 2019-06-11T15:33:33.518335Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/networking/v1alpha3/gateways 836 | 2019-06-11T15:33:33.518354Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/rbac/v1alpha1/servicerolebindings 837 | 2019-06-11T15:33:33.518393Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/rbac/v1alpha1/rbacconfigs 838 | 2019-06-11T15:33:33.518408Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/networking/v1alpha3/virtualservices 839 | 2019-06-11T15:33:33.518453Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/mixer/v1/config/client/quotaspecs 840 | 2019-06-11T15:33:33.518490Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/authentication/v1alpha1/policies 841 | 2019-06-11T15:33:33.518520Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/authentication/v1alpha1/meshpolicies 842 | 2019-06-11T15:33:33.518531Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/rbac/v1alpha1/clusterrbacconfigs 843 | 2019-06-11T15:33:33.518550Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/networking/v1alpha3/envoyfilters 844 | 2019-06-11T15:33:33.518559Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/networking/v1alpha3/destinationrules 845 | 2019-06-11T15:33:33.518615Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/config/v1alpha2/httpapispecs 846 | 2019-06-11T15:33:33.518626Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/config/v1alpha2/httpapispecbindings 847 | 2019-06-11T15:33:33.518646Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/mixer/v1/config/client/quotaspecbindings 848 | 2019-06-11T15:33:33.518657Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/rbac/v1alpha1/serviceroles 849 | 2019-06-11T15:33:33.518675Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/networking/v1alpha3/serviceentries 850 | 2019-06-11T15:33:33.518682Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: inc=false WATCH for istio/networking/v1alpha3/sidecars 851 | 2019-06-11T15:33:33.519006Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/networking/v1alpha3/gateways with version="23" nonce="1" inc=false 852 | 2019-06-11T15:33:33.519026Z info mcp Watch(): created watch 149 for istio/networking/v1alpha3/gateways from group "default", version "23" 853 | 2019-06-11T15:33:33.519036Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/rbac/v1alpha1/servicerolebindings with version="0" nonce="2" inc=false 854 | 2019-06-11T15:33:33.519042Z info mcp Watch(): created watch 150 for istio/rbac/v1alpha1/servicerolebindings from group "default", version "0" 855 | 2019-06-11T15:33:33.519053Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/rbac/v1alpha1/rbacconfigs with version="0" nonce="3" inc=false 856 | 2019-06-11T15:33:33.519060Z info mcp Watch(): created watch 151 for istio/rbac/v1alpha1/rbacconfigs from group "default", version "0" 857 | 2019-06-11T15:33:33.520037Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/networking/v1alpha3/virtualservices with version="32" nonce="4" inc=false 858 | 2019-06-11T15:33:33.520054Z info mcp Watch(): created watch 152 for istio/networking/v1alpha3/virtualservices from group "default", version "32" 859 | 2019-06-11T15:33:33.520063Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/mixer/v1/config/client/quotaspecs with version="0" nonce="5" inc=false 860 | 2019-06-11T15:33:33.520068Z info mcp Watch(): created watch 153 for istio/mixer/v1/config/client/quotaspecs from group "default", version "0" 861 | 2019-06-11T15:33:33.520079Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/authentication/v1alpha1/policies with version="27" nonce="6" inc=false 862 | 2019-06-11T15:33:33.520087Z info mcp Watch(): created watch 154 for istio/authentication/v1alpha1/policies from group "default", version "27" 863 | 2019-06-11T15:33:33.520093Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/authentication/v1alpha1/meshpolicies with version="1" nonce="7" inc=false 864 | 2019-06-11T15:33:33.520101Z info mcp Watch(): created watch 155 for istio/authentication/v1alpha1/meshpolicies from group "default", version "1" 865 | 2019-06-11T15:33:33.520110Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/rbac/v1alpha1/clusterrbacconfigs with version="0" nonce="8" inc=false 866 | 2019-06-11T15:33:33.520120Z info mcp Watch(): created watch 156 for istio/rbac/v1alpha1/clusterrbacconfigs from group "default", version "0" 867 | 2019-06-11T15:33:33.520127Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/networking/v1alpha3/envoyfilters with version="0" nonce="9" inc=false 868 | 2019-06-11T15:33:33.520131Z info mcp Watch(): created watch 157 for istio/networking/v1alpha3/envoyfilters from group "default", version "0" 869 | 2019-06-11T15:33:33.612375Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/networking/v1alpha3/destinationrules with version="22" nonce="10" inc=false 870 | 2019-06-11T15:33:33.612406Z info mcp Watch(): created watch 158 for istio/networking/v1alpha3/destinationrules from group "default", version "22" 871 | 2019-06-11T15:33:33.612419Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/config/v1alpha2/httpapispecs with version="0" nonce="11" inc=false 872 | 2019-06-11T15:33:33.612426Z info mcp Watch(): created watch 159 for istio/config/v1alpha2/httpapispecs from group "default", version "0" 873 | 2019-06-11T15:33:33.612437Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/config/v1alpha2/httpapispecbindings with version="0" nonce="12" inc=false 874 | 2019-06-11T15:33:33.612443Z info mcp Watch(): created watch 160 for istio/config/v1alpha2/httpapispecbindings from group "default", version "0" 875 | 2019-06-11T15:33:33.612450Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/mixer/v1/config/client/quotaspecbindings with version="0" nonce="13" inc=false 876 | 2019-06-11T15:33:33.612457Z info mcp Watch(): created watch 161 for istio/mixer/v1/config/client/quotaspecbindings from group "default", version "0" 877 | 2019-06-11T15:33:33.612467Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/rbac/v1alpha1/serviceroles with version="0" nonce="14" inc=false 878 | 2019-06-11T15:33:33.612472Z info mcp Watch(): created watch 162 for istio/rbac/v1alpha1/serviceroles from group "default", version "0" 879 | 2019-06-11T15:33:33.612479Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/networking/v1alpha3/serviceentries with version="0" nonce="15" inc=false 880 | 2019-06-11T15:33:33.612484Z info mcp Watch(): created watch 163 for istio/networking/v1alpha3/serviceentries from group "default", version "0" 881 | 2019-06-11T15:33:33.612493Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3} ACK collection=istio/networking/v1alpha3/sidecars with version="0" nonce="16" inc=false 882 | 2019-06-11T15:33:33.612500Z info mcp Watch(): created watch 164 for istio/networking/v1alpha3/sidecars from group "default", version "0" 883 | 2019-06-11T15:35:53.612742Z info transport: Got too many pings from the client, closing the connection. 884 | 2019-06-11T15:35:53.612864Z info transport: loopyWriter.run returning. Err: transport: Connection closing 885 | 2019-06-11T15:35:53.612961Z info transport: http2Server.HandleStreams failed to read frame: read tcp 10.32.0.32:9901->10.32.0.24:52812: use of closed network connection 886 | 2019-06-11T15:35:53.613110Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: CLOSED 887 | 2019-06-11T15:35:53.614116Z info mcp MCP: connection {addr=10.32.0.24:52812 id=3}: TERMINATED "rpc error: code = Canceled desc = context canceled" 888 | 2019-06-11T15:35:54.613802Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: NEW (ResourceSource), supported collections: []string{"istio/config/v1alpha2/legacy/reportnothings", "istio/networking/v1alpha3/virtualservices", "k8s/core/v1/endpoints", "istio/config/v1alpha2/legacy/checknothings", "istio/config/v1alpha2/legacy/dogstatsds", "istio/networking/v1alpha3/serviceentries", "istio/policy/v1beta1/attributemanifests", "istio/config/v1alpha2/httpapispecbindings", "istio/config/v1alpha2/legacy/fluentds", "istio/mixer/v1/config/client/quotaspecbindings", "istio/policy/v1beta1/handlers", "istio/config/v1alpha2/legacy/authorizations", "istio/config/v1alpha2/legacy/listentries", "istio/config/v1alpha2/legacy/circonuses", "istio/config/v1alpha2/legacy/deniers", "istio/config/v1alpha2/templates", "istio/rbac/v1alpha1/clusterrbacconfigs", "istio/policy/v1beta1/instances", "istio/rbac/v1alpha1/servicerolebindings", "istio/config/v1alpha2/legacy/memquotas", "istio/config/v1alpha2/adapters", "istio/config/v1alpha2/legacy/apikeys", "istio/config/v1alpha2/legacy/edges", "istio/config/v1alpha2/legacy/rbacs", "istio/config/v1alpha2/legacy/stackdrivers", "istio/config/v1alpha2/legacy/statsds", "istio/rbac/v1alpha1/rbacconfigs", "k8s/extensions/v1beta1/ingresses", "istio/config/v1alpha2/httpapispecs", "istio/config/v1alpha2/legacy/redisquotas", "istio/authentication/v1alpha1/policies", "istio/config/v1alpha2/legacy/kubernetesenvs", "istio/config/v1alpha2/legacy/noops", "istio/mixer/v1/config/client/quotaspecs", "istio/rbac/v1alpha1/serviceroles", "istio/config/v1alpha2/legacy/kuberneteses", "istio/config/v1alpha2/legacy/listcheckers", "istio/config/v1alpha2/legacy/opas", "istio/config/v1alpha2/legacy/zipkins", "k8s/core/v1/nodes", "k8s/core/v1/pods", "istio/config/v1alpha2/legacy/signalfxs", "istio/networking/v1alpha3/envoyfilters", "istio/authentication/v1alpha1/meshpolicies", "istio/config/v1alpha2/legacy/bypasses", "istio/config/v1alpha2/legacy/logentries", "istio/config/v1alpha2/legacy/solarwindses", "istio/config/v1alpha2/legacy/stdios", "istio/networking/v1alpha3/gateways", "istio/config/v1alpha2/legacy/cloudwatches", "istio/config/v1alpha2/legacy/quotas", "istio/networking/v1alpha3/destinationrules", "istio/networking/v1alpha3/sidecars", "k8s/core/v1/services", "istio/config/v1alpha2/legacy/metrics", "istio/config/v1alpha2/legacy/prometheuses", "istio/config/v1alpha2/legacy/tracespans", "istio/policy/v1beta1/rules"} 889 | 2019-06-11T15:35:54.613879Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/networking/v1alpha3/sidecars 890 | 2019-06-11T15:35:54.613906Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/rbac/v1alpha1/rbacconfigs 891 | 2019-06-11T15:35:54.613928Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/networking/v1alpha3/virtualservices 892 | 2019-06-11T15:35:54.613966Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/networking/v1alpha3/gateways 893 | 2019-06-11T15:35:54.613982Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/rbac/v1alpha1/servicerolebindings 894 | 2019-06-11T15:35:54.614008Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/authentication/v1alpha1/meshpolicies 895 | 2019-06-11T15:35:54.614017Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/rbac/v1alpha1/clusterrbacconfigs 896 | 2019-06-11T15:35:54.614036Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/networking/v1alpha3/envoyfilters 897 | 2019-06-11T15:35:54.614044Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/mixer/v1/config/client/quotaspecs 898 | 2019-06-11T15:35:54.614056Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/authentication/v1alpha1/policies 899 | 2019-06-11T15:35:54.614071Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/config/v1alpha2/httpapispecbindings 900 | 2019-06-11T15:35:54.614084Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/mixer/v1/config/client/quotaspecbindings 901 | 2019-06-11T15:35:54.614091Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/rbac/v1alpha1/serviceroles 902 | 2019-06-11T15:35:54.614126Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/networking/v1alpha3/serviceentries 903 | 2019-06-11T15:35:54.614148Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/networking/v1alpha3/destinationrules 904 | 2019-06-11T15:35:54.614232Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: inc=false WATCH for istio/config/v1alpha2/httpapispecs 905 | 2019-06-11T15:35:54.614889Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/networking/v1alpha3/sidecars with version="0" nonce="1" inc=false 906 | 2019-06-11T15:35:54.614905Z info mcp Watch(): created watch 165 for istio/networking/v1alpha3/sidecars from group "default", version "0" 907 | 2019-06-11T15:35:54.614914Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/rbac/v1alpha1/rbacconfigs with version="0" nonce="2" inc=false 908 | 2019-06-11T15:35:54.614919Z info mcp Watch(): created watch 166 for istio/rbac/v1alpha1/rbacconfigs from group "default", version "0" 909 | 2019-06-11T15:35:54.614936Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/networking/v1alpha3/virtualservices with version="32" nonce="3" inc=false 910 | 2019-06-11T15:35:54.614946Z info mcp Watch(): created watch 167 for istio/networking/v1alpha3/virtualservices from group "default", version "32" 911 | 2019-06-11T15:35:54.614957Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/networking/v1alpha3/gateways with version="23" nonce="4" inc=false 912 | 2019-06-11T15:35:54.614964Z info mcp Watch(): created watch 168 for istio/networking/v1alpha3/gateways from group "default", version "23" 913 | 2019-06-11T15:35:54.614976Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/rbac/v1alpha1/servicerolebindings with version="0" nonce="5" inc=false 914 | 2019-06-11T15:35:54.614984Z info mcp Watch(): created watch 169 for istio/rbac/v1alpha1/servicerolebindings from group "default", version "0" 915 | 2019-06-11T15:35:54.614990Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/authentication/v1alpha1/meshpolicies with version="1" nonce="6" inc=false 916 | 2019-06-11T15:35:54.614996Z info mcp Watch(): created watch 170 for istio/authentication/v1alpha1/meshpolicies from group "default", version "1" 917 | 2019-06-11T15:35:54.615020Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/rbac/v1alpha1/clusterrbacconfigs with version="0" nonce="7" inc=false 918 | 2019-06-11T15:35:54.615037Z info mcp Watch(): created watch 171 for istio/rbac/v1alpha1/clusterrbacconfigs from group "default", version "0" 919 | 2019-06-11T15:35:54.615045Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/networking/v1alpha3/envoyfilters with version="0" nonce="8" inc=false 920 | 2019-06-11T15:35:54.615050Z info mcp Watch(): created watch 172 for istio/networking/v1alpha3/envoyfilters from group "default", version "0" 921 | 2019-06-11T15:35:54.615062Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/mixer/v1/config/client/quotaspecs with version="0" nonce="9" inc=false 922 | 2019-06-11T15:35:54.615071Z info mcp Watch(): created watch 173 for istio/mixer/v1/config/client/quotaspecs from group "default", version "0" 923 | 2019-06-11T15:35:54.615078Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/authentication/v1alpha1/policies with version="27" nonce="10" inc=false 924 | 2019-06-11T15:35:54.615083Z info mcp Watch(): created watch 174 for istio/authentication/v1alpha1/policies from group "default", version "27" 925 | 2019-06-11T15:35:54.615095Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/config/v1alpha2/httpapispecbindings with version="0" nonce="11" inc=false 926 | 2019-06-11T15:35:54.615100Z info mcp Watch(): created watch 175 for istio/config/v1alpha2/httpapispecbindings from group "default", version "0" 927 | 2019-06-11T15:35:54.615107Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/mixer/v1/config/client/quotaspecbindings with version="0" nonce="12" inc=false 928 | 2019-06-11T15:35:54.615112Z info mcp Watch(): created watch 176 for istio/mixer/v1/config/client/quotaspecbindings from group "default", version "0" 929 | 2019-06-11T15:35:54.615123Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/rbac/v1alpha1/serviceroles with version="0" nonce="13" inc=false 930 | 2019-06-11T15:35:54.615129Z info mcp Watch(): created watch 177 for istio/rbac/v1alpha1/serviceroles from group "default", version "0" 931 | 2019-06-11T15:35:54.615136Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/networking/v1alpha3/serviceentries with version="0" nonce="14" inc=false 932 | 2019-06-11T15:35:54.615142Z info mcp Watch(): created watch 178 for istio/networking/v1alpha3/serviceentries from group "default", version "0" 933 | 2019-06-11T15:35:54.615167Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/networking/v1alpha3/destinationrules with version="22" nonce="15" inc=false 934 | 2019-06-11T15:35:54.615182Z info mcp Watch(): created watch 179 for istio/networking/v1alpha3/destinationrules from group "default", version "22" 935 | 2019-06-11T15:35:54.615190Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4} ACK collection=istio/config/v1alpha2/httpapispecs with version="0" nonce="16" inc=false 936 | 2019-06-11T15:35:54.615195Z info mcp Watch(): created watch 180 for istio/config/v1alpha2/httpapispecs from group "default", version "0" 937 | 2019-06-11T15:40:13.722513Z info transport: Got too many pings from the client, closing the connection. 938 | 2019-06-11T15:40:13.722622Z info transport: loopyWriter.run returning. Err: transport: Connection closing 939 | 2019-06-11T15:40:13.722717Z info transport: http2Server.HandleStreams failed to read frame: read tcp 10.32.0.32:9901->10.32.0.24:54714: use of closed network connection 940 | 2019-06-11T15:40:13.722757Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: CLOSED 941 | 2019-06-11T15:40:13.722779Z info mcp MCP: connection {addr=10.32.0.24:54714 id=4}: TERMINATED "rpc error: code = Canceled desc = context canceled" 942 | 2019-06-11T15:40:14.723434Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: NEW (ResourceSource), supported collections: []string{"istio/config/v1alpha2/legacy/reportnothings", "istio/networking/v1alpha3/virtualservices", "k8s/core/v1/endpoints", "istio/config/v1alpha2/legacy/checknothings", "istio/config/v1alpha2/legacy/dogstatsds", "istio/networking/v1alpha3/serviceentries", "istio/policy/v1beta1/attributemanifests", "istio/config/v1alpha2/httpapispecbindings", "istio/config/v1alpha2/legacy/fluentds", "istio/mixer/v1/config/client/quotaspecbindings", "istio/policy/v1beta1/handlers", "istio/config/v1alpha2/legacy/authorizations", "istio/config/v1alpha2/legacy/listentries", "istio/config/v1alpha2/legacy/circonuses", "istio/config/v1alpha2/legacy/deniers", "istio/config/v1alpha2/templates", "istio/rbac/v1alpha1/clusterrbacconfigs", "istio/policy/v1beta1/instances", "istio/rbac/v1alpha1/servicerolebindings", "istio/config/v1alpha2/legacy/memquotas", "istio/config/v1alpha2/adapters", "istio/config/v1alpha2/legacy/apikeys", "istio/config/v1alpha2/legacy/edges", "istio/config/v1alpha2/legacy/rbacs", "istio/config/v1alpha2/legacy/stackdrivers", "istio/config/v1alpha2/legacy/statsds", "istio/rbac/v1alpha1/rbacconfigs", "k8s/extensions/v1beta1/ingresses", "istio/config/v1alpha2/httpapispecs", "istio/config/v1alpha2/legacy/redisquotas", "istio/authentication/v1alpha1/policies", "istio/config/v1alpha2/legacy/kubernetesenvs", "istio/config/v1alpha2/legacy/noops", "istio/mixer/v1/config/client/quotaspecs", "istio/rbac/v1alpha1/serviceroles", "istio/config/v1alpha2/legacy/kuberneteses", "istio/config/v1alpha2/legacy/listcheckers", "istio/config/v1alpha2/legacy/opas", "istio/config/v1alpha2/legacy/zipkins", "k8s/core/v1/nodes", "k8s/core/v1/pods", "istio/config/v1alpha2/legacy/signalfxs", "istio/networking/v1alpha3/envoyfilters", "istio/authentication/v1alpha1/meshpolicies", "istio/config/v1alpha2/legacy/bypasses", "istio/config/v1alpha2/legacy/logentries", "istio/config/v1alpha2/legacy/solarwindses", "istio/config/v1alpha2/legacy/stdios", "istio/networking/v1alpha3/gateways", "istio/config/v1alpha2/legacy/cloudwatches", "istio/config/v1alpha2/legacy/quotas", "istio/networking/v1alpha3/destinationrules", "istio/networking/v1alpha3/sidecars", "k8s/core/v1/services", "istio/config/v1alpha2/legacy/metrics", "istio/config/v1alpha2/legacy/prometheuses", "istio/config/v1alpha2/legacy/tracespans", "istio/policy/v1beta1/rules"} 943 | 2019-06-11T15:40:14.723500Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/mixer/v1/config/client/quotaspecbindings 944 | 2019-06-11T15:40:14.723520Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/rbac/v1alpha1/serviceroles 945 | 2019-06-11T15:40:14.723564Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/networking/v1alpha3/serviceentries 946 | 2019-06-11T15:40:14.723575Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/networking/v1alpha3/destinationrules 947 | 2019-06-11T15:40:14.723648Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/config/v1alpha2/httpapispecs 948 | 2019-06-11T15:40:14.723674Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/config/v1alpha2/httpapispecbindings 949 | 2019-06-11T15:40:14.723691Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/networking/v1alpha3/sidecars 950 | 2019-06-11T15:40:14.723701Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/networking/v1alpha3/virtualservices 951 | 2019-06-11T15:40:14.723755Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/networking/v1alpha3/gateways 952 | 2019-06-11T15:40:14.723767Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/rbac/v1alpha1/servicerolebindings 953 | 2019-06-11T15:40:14.723790Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/rbac/v1alpha1/rbacconfigs 954 | 2019-06-11T15:40:14.723815Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/rbac/v1alpha1/clusterrbacconfigs 955 | 2019-06-11T15:40:14.723835Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/networking/v1alpha3/envoyfilters 956 | 2019-06-11T15:40:14.723842Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/mixer/v1/config/client/quotaspecs 957 | 2019-06-11T15:40:14.723856Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/authentication/v1alpha1/policies 958 | 2019-06-11T15:40:14.723862Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: inc=false WATCH for istio/authentication/v1alpha1/meshpolicies 959 | 2019-06-11T15:40:14.724520Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/mixer/v1/config/client/quotaspecbindings with version="0" nonce="1" inc=false 960 | 2019-06-11T15:40:14.724541Z info mcp Watch(): created watch 181 for istio/mixer/v1/config/client/quotaspecbindings from group "default", version "0" 961 | 2019-06-11T15:40:14.724556Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/rbac/v1alpha1/serviceroles with version="0" nonce="2" inc=false 962 | 2019-06-11T15:40:14.724567Z info mcp Watch(): created watch 182 for istio/rbac/v1alpha1/serviceroles from group "default", version "0" 963 | 2019-06-11T15:40:14.724574Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/networking/v1alpha3/serviceentries with version="0" nonce="3" inc=false 964 | 2019-06-11T15:40:14.724583Z info mcp Watch(): created watch 183 for istio/networking/v1alpha3/serviceentries from group "default", version "0" 965 | 2019-06-11T15:40:14.724596Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/networking/v1alpha3/destinationrules with version="22" nonce="4" inc=false 966 | 2019-06-11T15:40:14.724603Z info mcp Watch(): created watch 184 for istio/networking/v1alpha3/destinationrules from group "default", version "22" 967 | 2019-06-11T15:40:14.724609Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/config/v1alpha2/httpapispecs with version="0" nonce="5" inc=false 968 | 2019-06-11T15:40:14.724615Z info mcp Watch(): created watch 185 for istio/config/v1alpha2/httpapispecs from group "default", version "0" 969 | 2019-06-11T15:40:14.724624Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/config/v1alpha2/httpapispecbindings with version="0" nonce="6" inc=false 970 | 2019-06-11T15:40:14.724630Z info mcp Watch(): created watch 186 for istio/config/v1alpha2/httpapispecbindings from group "default", version "0" 971 | 2019-06-11T15:40:14.724637Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/networking/v1alpha3/sidecars with version="0" nonce="7" inc=false 972 | 2019-06-11T15:40:14.724642Z info mcp Watch(): created watch 187 for istio/networking/v1alpha3/sidecars from group "default", version "0" 973 | 2019-06-11T15:40:14.724651Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/networking/v1alpha3/virtualservices with version="32" nonce="8" inc=false 974 | 2019-06-11T15:40:14.724657Z info mcp Watch(): created watch 188 for istio/networking/v1alpha3/virtualservices from group "default", version "32" 975 | 2019-06-11T15:40:14.724663Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/networking/v1alpha3/gateways with version="23" nonce="9" inc=false 976 | 2019-06-11T15:40:14.724668Z info mcp Watch(): created watch 189 for istio/networking/v1alpha3/gateways from group "default", version "23" 977 | 2019-06-11T15:40:14.724677Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/rbac/v1alpha1/servicerolebindings with version="0" nonce="10" inc=false 978 | 2019-06-11T15:40:14.724683Z info mcp Watch(): created watch 190 for istio/rbac/v1alpha1/servicerolebindings from group "default", version "0" 979 | 2019-06-11T15:40:14.724689Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/rbac/v1alpha1/rbacconfigs with version="0" nonce="11" inc=false 980 | 2019-06-11T15:40:14.724695Z info mcp Watch(): created watch 191 for istio/rbac/v1alpha1/rbacconfigs from group "default", version "0" 981 | 2019-06-11T15:40:14.724705Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/rbac/v1alpha1/clusterrbacconfigs with version="0" nonce="12" inc=false 982 | 2019-06-11T15:40:14.724714Z info mcp Watch(): created watch 192 for istio/rbac/v1alpha1/clusterrbacconfigs from group "default", version "0" 983 | 2019-06-11T15:40:14.724721Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/networking/v1alpha3/envoyfilters with version="0" nonce="13" inc=false 984 | 2019-06-11T15:40:14.724726Z info mcp Watch(): created watch 193 for istio/networking/v1alpha3/envoyfilters from group "default", version "0" 985 | 2019-06-11T15:40:14.724733Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/mixer/v1/config/client/quotaspecs with version="0" nonce="14" inc=false 986 | 2019-06-11T15:40:14.724739Z info mcp Watch(): created watch 194 for istio/mixer/v1/config/client/quotaspecs from group "default", version "0" 987 | 2019-06-11T15:40:14.724756Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/authentication/v1alpha1/policies with version="27" nonce="15" inc=false 988 | 2019-06-11T15:40:14.724775Z info mcp Watch(): created watch 195 for istio/authentication/v1alpha1/policies from group "default", version "27" 989 | 2019-06-11T15:40:14.724784Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5} ACK collection=istio/authentication/v1alpha1/meshpolicies with version="1" nonce="16" inc=false 990 | 2019-06-11T15:40:14.724798Z info mcp Watch(): created watch 196 for istio/authentication/v1alpha1/meshpolicies from group "default", version "1" 991 | 2019-06-11T15:48:33.817730Z info transport: Got too many pings from the client, closing the connection. 992 | 2019-06-11T15:48:33.817885Z info transport: loopyWriter.run returning. Err: transport: Connection closing 993 | 2019-06-11T15:48:33.818031Z info transport: http2Server.HandleStreams failed to read frame: read tcp 10.32.0.32:9901->10.32.0.24:58060: use of closed network connection 994 | 2019-06-11T15:48:33.818059Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: CLOSED 995 | 2019-06-11T15:48:33.818087Z info mcp MCP: connection {addr=10.32.0.24:58060 id=5}: TERMINATED "rpc error: code = Canceled desc = context canceled" 996 | 2019-06-11T15:48:34.819323Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: NEW (ResourceSource), supported collections: []string{"istio/config/v1alpha2/legacy/reportnothings", "istio/networking/v1alpha3/virtualservices", "k8s/core/v1/endpoints", "istio/config/v1alpha2/legacy/checknothings", "istio/config/v1alpha2/legacy/dogstatsds", "istio/networking/v1alpha3/serviceentries", "istio/policy/v1beta1/attributemanifests", "istio/config/v1alpha2/httpapispecbindings", "istio/config/v1alpha2/legacy/fluentds", "istio/mixer/v1/config/client/quotaspecbindings", "istio/policy/v1beta1/handlers", "istio/config/v1alpha2/legacy/authorizations", "istio/config/v1alpha2/legacy/listentries", "istio/config/v1alpha2/legacy/circonuses", "istio/config/v1alpha2/legacy/deniers", "istio/config/v1alpha2/templates", "istio/rbac/v1alpha1/clusterrbacconfigs", "istio/policy/v1beta1/instances", "istio/rbac/v1alpha1/servicerolebindings", "istio/config/v1alpha2/legacy/memquotas", "istio/config/v1alpha2/adapters", "istio/config/v1alpha2/legacy/apikeys", "istio/config/v1alpha2/legacy/edges", "istio/config/v1alpha2/legacy/rbacs", "istio/config/v1alpha2/legacy/stackdrivers", "istio/config/v1alpha2/legacy/statsds", "istio/rbac/v1alpha1/rbacconfigs", "k8s/extensions/v1beta1/ingresses", "istio/config/v1alpha2/httpapispecs", "istio/config/v1alpha2/legacy/redisquotas", "istio/authentication/v1alpha1/policies", "istio/config/v1alpha2/legacy/kubernetesenvs", "istio/config/v1alpha2/legacy/noops", "istio/mixer/v1/config/client/quotaspecs", "istio/rbac/v1alpha1/serviceroles", "istio/config/v1alpha2/legacy/kuberneteses", "istio/config/v1alpha2/legacy/listcheckers", "istio/config/v1alpha2/legacy/opas", "istio/config/v1alpha2/legacy/zipkins", "k8s/core/v1/nodes", "k8s/core/v1/pods", "istio/config/v1alpha2/legacy/signalfxs", "istio/networking/v1alpha3/envoyfilters", "istio/authentication/v1alpha1/meshpolicies", "istio/config/v1alpha2/legacy/bypasses", "istio/config/v1alpha2/legacy/logentries", "istio/config/v1alpha2/legacy/solarwindses", "istio/config/v1alpha2/legacy/stdios", "istio/networking/v1alpha3/gateways", "istio/config/v1alpha2/legacy/cloudwatches", "istio/config/v1alpha2/legacy/quotas", "istio/networking/v1alpha3/destinationrules", "istio/networking/v1alpha3/sidecars", "k8s/core/v1/services", "istio/config/v1alpha2/legacy/metrics", "istio/config/v1alpha2/legacy/prometheuses", "istio/config/v1alpha2/legacy/tracespans", "istio/policy/v1beta1/rules"} 997 | 2019-06-11T15:48:34.819398Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/networking/v1alpha3/sidecars 998 | 2019-06-11T15:48:34.819433Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/networking/v1alpha3/gateways 999 | 2019-06-11T15:48:34.819468Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/rbac/v1alpha1/servicerolebindings 1000 | 2019-06-11T15:48:34.819482Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/rbac/v1alpha1/rbacconfigs 1001 | 2019-06-11T15:48:34.819500Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/networking/v1alpha3/virtualservices 1002 | 2019-06-11T15:48:34.819510Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/mixer/v1/config/client/quotaspecs 1003 | 2019-06-11T15:48:34.819555Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/authentication/v1alpha1/policies 1004 | 2019-06-11T15:48:34.819571Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/authentication/v1alpha1/meshpolicies 1005 | 2019-06-11T15:48:34.819607Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/rbac/v1alpha1/clusterrbacconfigs 1006 | 2019-06-11T15:48:34.819618Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/networking/v1alpha3/envoyfilters 1007 | 2019-06-11T15:48:34.819638Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/networking/v1alpha3/destinationrules 1008 | 2019-06-11T15:48:34.819648Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/config/v1alpha2/httpapispecs 1009 | 2019-06-11T15:48:34.819700Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/config/v1alpha2/httpapispecbindings 1010 | 2019-06-11T15:48:34.819720Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/mixer/v1/config/client/quotaspecbindings 1011 | 2019-06-11T15:48:34.819741Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/rbac/v1alpha1/serviceroles 1012 | 2019-06-11T15:48:34.819752Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: inc=false WATCH for istio/networking/v1alpha3/serviceentries 1013 | 2019-06-11T15:48:34.821006Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/networking/v1alpha3/sidecars with version="0" nonce="1" inc=false 1014 | 2019-06-11T15:48:34.821038Z info mcp Watch(): created watch 197 for istio/networking/v1alpha3/sidecars from group "default", version "0" 1015 | 2019-06-11T15:48:34.821053Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/networking/v1alpha3/gateways with version="23" nonce="2" inc=false 1016 | 2019-06-11T15:48:34.821062Z info mcp Watch(): created watch 198 for istio/networking/v1alpha3/gateways from group "default", version "23" 1017 | 2019-06-11T15:48:34.821078Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/rbac/v1alpha1/servicerolebindings with version="0" nonce="3" inc=false 1018 | 2019-06-11T15:48:34.821086Z info mcp Watch(): created watch 199 for istio/rbac/v1alpha1/servicerolebindings from group "default", version "0" 1019 | 2019-06-11T15:48:34.821097Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/rbac/v1alpha1/rbacconfigs with version="0" nonce="4" inc=false 1020 | 2019-06-11T15:48:34.821104Z info mcp Watch(): created watch 200 for istio/rbac/v1alpha1/rbacconfigs from group "default", version "0" 1021 | 2019-06-11T15:48:34.821123Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/networking/v1alpha3/virtualservices with version="32" nonce="5" inc=false 1022 | 2019-06-11T15:48:34.821134Z info mcp Watch(): created watch 201 for istio/networking/v1alpha3/virtualservices from group "default", version "32" 1023 | 2019-06-11T15:48:34.821145Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/mixer/v1/config/client/quotaspecs with version="0" nonce="6" inc=false 1024 | 2019-06-11T15:48:34.821163Z info mcp Watch(): created watch 202 for istio/mixer/v1/config/client/quotaspecs from group "default", version "0" 1025 | 2019-06-11T15:48:34.821179Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/authentication/v1alpha1/policies with version="27" nonce="7" inc=false 1026 | 2019-06-11T15:48:34.821192Z info mcp Watch(): created watch 203 for istio/authentication/v1alpha1/policies from group "default", version "27" 1027 | 2019-06-11T15:48:34.821201Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/authentication/v1alpha1/meshpolicies with version="1" nonce="8" inc=false 1028 | 2019-06-11T15:48:34.821209Z info mcp Watch(): created watch 204 for istio/authentication/v1alpha1/meshpolicies from group "default", version "1" 1029 | 2019-06-11T15:48:34.821223Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/rbac/v1alpha1/clusterrbacconfigs with version="0" nonce="9" inc=false 1030 | 2019-06-11T15:48:34.821231Z info mcp Watch(): created watch 205 for istio/rbac/v1alpha1/clusterrbacconfigs from group "default", version "0" 1031 | 2019-06-11T15:48:34.821241Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/networking/v1alpha3/envoyfilters with version="0" nonce="10" inc=false 1032 | 2019-06-11T15:48:34.821249Z info mcp Watch(): created watch 206 for istio/networking/v1alpha3/envoyfilters from group "default", version "0" 1033 | 2019-06-11T15:48:34.821267Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/networking/v1alpha3/destinationrules with version="22" nonce="11" inc=false 1034 | 2019-06-11T15:48:34.821278Z info mcp Watch(): created watch 207 for istio/networking/v1alpha3/destinationrules from group "default", version "22" 1035 | 2019-06-11T15:48:34.821287Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/config/v1alpha2/httpapispecs with version="0" nonce="12" inc=false 1036 | 2019-06-11T15:48:34.821295Z info mcp Watch(): created watch 208 for istio/config/v1alpha2/httpapispecs from group "default", version "0" 1037 | 2019-06-11T15:48:34.821310Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/config/v1alpha2/httpapispecbindings with version="0" nonce="13" inc=false 1038 | 2019-06-11T15:48:34.821317Z info mcp Watch(): created watch 209 for istio/config/v1alpha2/httpapispecbindings from group "default", version "0" 1039 | 2019-06-11T15:48:34.821330Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/mixer/v1/config/client/quotaspecbindings with version="0" nonce="14" inc=false 1040 | 2019-06-11T15:48:34.821339Z info mcp Watch(): created watch 210 for istio/mixer/v1/config/client/quotaspecbindings from group "default", version "0" 1041 | 2019-06-11T15:48:34.821363Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/rbac/v1alpha1/serviceroles with version="0" nonce="15" inc=false 1042 | 2019-06-11T15:48:34.821374Z info mcp Watch(): created watch 211 for istio/rbac/v1alpha1/serviceroles from group "default", version "0" 1043 | 2019-06-11T15:48:34.821385Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6} ACK collection=istio/networking/v1alpha3/serviceentries with version="0" nonce="16" inc=false 1044 | 2019-06-11T15:48:34.821393Z info mcp Watch(): created watch 212 for istio/networking/v1alpha3/serviceentries from group "default", version "0" 1045 | 2019-06-11T16:09:03.924946Z info transport: Got too many pings from the client, closing the connection. 1046 | 2019-06-11T16:09:03.925204Z info transport: loopyWriter.run returning. Err: transport: Connection closing 1047 | 2019-06-11T16:09:03.925349Z info transport: http2Server.HandleStreams failed to read frame: read tcp 10.32.0.32:9901->10.32.0.24:36276: use of closed network connection 1048 | 2019-06-11T16:09:03.925383Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: CLOSED 1049 | 2019-06-11T16:09:03.925449Z info mcp MCP: connection {addr=10.32.0.24:36276 id=6}: TERMINATED "rpc error: code = Canceled desc = context canceled" 1050 | 2019-06-11T16:09:04.926069Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: NEW (ResourceSource), supported collections: []string{"istio/config/v1alpha2/legacy/reportnothings", "istio/networking/v1alpha3/virtualservices", "k8s/core/v1/endpoints", "istio/config/v1alpha2/legacy/checknothings", "istio/config/v1alpha2/legacy/dogstatsds", "istio/networking/v1alpha3/serviceentries", "istio/policy/v1beta1/attributemanifests", "istio/config/v1alpha2/httpapispecbindings", "istio/config/v1alpha2/legacy/fluentds", "istio/mixer/v1/config/client/quotaspecbindings", "istio/policy/v1beta1/handlers", "istio/config/v1alpha2/legacy/authorizations", "istio/config/v1alpha2/legacy/listentries", "istio/config/v1alpha2/legacy/circonuses", "istio/config/v1alpha2/legacy/deniers", "istio/config/v1alpha2/templates", "istio/rbac/v1alpha1/clusterrbacconfigs", "istio/policy/v1beta1/instances", "istio/rbac/v1alpha1/servicerolebindings", "istio/config/v1alpha2/legacy/memquotas", "istio/config/v1alpha2/adapters", "istio/config/v1alpha2/legacy/apikeys", "istio/config/v1alpha2/legacy/edges", "istio/config/v1alpha2/legacy/rbacs", "istio/config/v1alpha2/legacy/stackdrivers", "istio/config/v1alpha2/legacy/statsds", "istio/rbac/v1alpha1/rbacconfigs", "k8s/extensions/v1beta1/ingresses", "istio/config/v1alpha2/httpapispecs", "istio/config/v1alpha2/legacy/redisquotas", "istio/authentication/v1alpha1/policies", "istio/config/v1alpha2/legacy/kubernetesenvs", "istio/config/v1alpha2/legacy/noops", "istio/mixer/v1/config/client/quotaspecs", "istio/rbac/v1alpha1/serviceroles", "istio/config/v1alpha2/legacy/kuberneteses", "istio/config/v1alpha2/legacy/listcheckers", "istio/config/v1alpha2/legacy/opas", "istio/config/v1alpha2/legacy/zipkins", "k8s/core/v1/nodes", "k8s/core/v1/pods", "istio/config/v1alpha2/legacy/signalfxs", "istio/networking/v1alpha3/envoyfilters", "istio/authentication/v1alpha1/meshpolicies", "istio/config/v1alpha2/legacy/bypasses", "istio/config/v1alpha2/legacy/logentries", "istio/config/v1alpha2/legacy/solarwindses", "istio/config/v1alpha2/legacy/stdios", "istio/networking/v1alpha3/gateways", "istio/config/v1alpha2/legacy/cloudwatches", "istio/config/v1alpha2/legacy/quotas", "istio/networking/v1alpha3/destinationrules", "istio/networking/v1alpha3/sidecars", "k8s/core/v1/services", "istio/config/v1alpha2/legacy/metrics", "istio/config/v1alpha2/legacy/prometheuses", "istio/config/v1alpha2/legacy/tracespans", "istio/policy/v1beta1/rules"} 1051 | 2019-06-11T16:09:04.926132Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/networking/v1alpha3/virtualservices 1052 | 2019-06-11T16:09:04.926157Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/networking/v1alpha3/gateways 1053 | 2019-06-11T16:09:04.926211Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/rbac/v1alpha1/servicerolebindings 1054 | 2019-06-11T16:09:04.926224Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/rbac/v1alpha1/rbacconfigs 1055 | 2019-06-11T16:09:04.926240Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/rbac/v1alpha1/clusterrbacconfigs 1056 | 2019-06-11T16:09:04.926247Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/networking/v1alpha3/envoyfilters 1057 | 2019-06-11T16:09:04.926260Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/mixer/v1/config/client/quotaspecs 1058 | 2019-06-11T16:09:04.926267Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/authentication/v1alpha1/policies 1059 | 2019-06-11T16:09:04.926286Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/authentication/v1alpha1/meshpolicies 1060 | 2019-06-11T16:09:04.926293Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/mixer/v1/config/client/quotaspecbindings 1061 | 2019-06-11T16:09:04.926310Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/rbac/v1alpha1/serviceroles 1062 | 2019-06-11T16:09:04.926316Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/networking/v1alpha3/serviceentries 1063 | 2019-06-11T16:09:04.926329Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/networking/v1alpha3/destinationrules 1064 | 2019-06-11T16:09:04.926336Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/config/v1alpha2/httpapispecs 1065 | 2019-06-11T16:09:04.926382Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/config/v1alpha2/httpapispecbindings 1066 | 2019-06-11T16:09:04.926398Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7}: inc=false WATCH for istio/networking/v1alpha3/sidecars 1067 | 2019-06-11T16:09:05.013122Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/networking/v1alpha3/virtualservices with version="32" nonce="1" inc=false 1068 | 2019-06-11T16:09:05.013151Z info mcp Watch(): created watch 213 for istio/networking/v1alpha3/virtualservices from group "default", version "32" 1069 | 2019-06-11T16:09:05.013163Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/networking/v1alpha3/gateways with version="23" nonce="2" inc=false 1070 | 2019-06-11T16:09:05.013169Z info mcp Watch(): created watch 214 for istio/networking/v1alpha3/gateways from group "default", version "23" 1071 | 2019-06-11T16:09:05.013182Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/rbac/v1alpha1/servicerolebindings with version="0" nonce="3" inc=false 1072 | 2019-06-11T16:09:05.013188Z info mcp Watch(): created watch 215 for istio/rbac/v1alpha1/servicerolebindings from group "default", version "0" 1073 | 2019-06-11T16:09:05.013195Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/rbac/v1alpha1/rbacconfigs with version="0" nonce="4" inc=false 1074 | 2019-06-11T16:09:05.013200Z info mcp Watch(): created watch 216 for istio/rbac/v1alpha1/rbacconfigs from group "default", version "0" 1075 | 2019-06-11T16:09:05.013249Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/rbac/v1alpha1/clusterrbacconfigs with version="0" nonce="5" inc=false 1076 | 2019-06-11T16:09:05.013280Z info mcp Watch(): created watch 217 for istio/rbac/v1alpha1/clusterrbacconfigs from group "default", version "0" 1077 | 2019-06-11T16:09:05.013297Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/networking/v1alpha3/envoyfilters with version="0" nonce="6" inc=false 1078 | 2019-06-11T16:09:05.013308Z info mcp Watch(): created watch 218 for istio/networking/v1alpha3/envoyfilters from group "default", version "0" 1079 | 2019-06-11T16:09:05.013330Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/mixer/v1/config/client/quotaspecs with version="0" nonce="7" inc=false 1080 | 2019-06-11T16:09:05.013346Z info mcp Watch(): created watch 219 for istio/mixer/v1/config/client/quotaspecs from group "default", version "0" 1081 | 2019-06-11T16:09:05.013365Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/authentication/v1alpha1/policies with version="27" nonce="8" inc=false 1082 | 2019-06-11T16:09:05.013377Z info mcp Watch(): created watch 220 for istio/authentication/v1alpha1/policies from group "default", version "27" 1083 | 2019-06-11T16:09:05.013402Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/authentication/v1alpha1/meshpolicies with version="1" nonce="9" inc=false 1084 | 2019-06-11T16:09:05.013414Z info mcp Watch(): created watch 221 for istio/authentication/v1alpha1/meshpolicies from group "default", version "1" 1085 | 2019-06-11T16:09:05.013421Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/mixer/v1/config/client/quotaspecbindings with version="0" nonce="10" inc=false 1086 | 2019-06-11T16:09:05.013426Z info mcp Watch(): created watch 222 for istio/mixer/v1/config/client/quotaspecbindings from group "default", version "0" 1087 | 2019-06-11T16:09:05.013436Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/rbac/v1alpha1/serviceroles with version="0" nonce="11" inc=false 1088 | 2019-06-11T16:09:05.013441Z info mcp Watch(): created watch 223 for istio/rbac/v1alpha1/serviceroles from group "default", version "0" 1089 | 2019-06-11T16:09:05.013448Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/networking/v1alpha3/serviceentries with version="0" nonce="12" inc=false 1090 | 2019-06-11T16:09:05.013453Z info mcp Watch(): created watch 224 for istio/networking/v1alpha3/serviceentries from group "default", version "0" 1091 | 2019-06-11T16:09:05.013476Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/networking/v1alpha3/destinationrules with version="22" nonce="13" inc=false 1092 | 2019-06-11T16:09:05.013484Z info mcp Watch(): created watch 225 for istio/networking/v1alpha3/destinationrules from group "default", version "22" 1093 | 2019-06-11T16:09:05.013491Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/config/v1alpha2/httpapispecs with version="0" nonce="14" inc=false 1094 | 2019-06-11T16:09:05.013497Z info mcp Watch(): created watch 226 for istio/config/v1alpha2/httpapispecs from group "default", version "0" 1095 | 2019-06-11T16:09:05.013526Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/config/v1alpha2/httpapispecbindings with version="0" nonce="15" inc=false 1096 | 2019-06-11T16:09:05.013550Z info mcp Watch(): created watch 227 for istio/config/v1alpha2/httpapispecbindings from group "default", version "0" 1097 | 2019-06-11T16:09:05.013562Z info mcp MCP: connection {addr=10.32.0.24:52120 id=7} ACK collection=istio/networking/v1alpha3/sidecars with version="0" nonce="16" inc=false 1098 | 2019-06-11T16:09:05.013571Z info mcp Watch(): created watch 228 for istio/networking/v1alpha3/sidecars from group "default", version "0" 1099 | 2019-06-23T02:15:07.941891Z info http: TLS handshake error from 127.0.0.1:41932: tls: first record does not look like a TLS handshake 1100 | 2019-06-23T02:15:29.983760Z info http: TLS handshake error from 127.0.0.1:42272: tls: first record does not look like a TLS handshake 1101 | 2019-06-23T02:15:39.722843Z info http: TLS handshake error from 127.0.0.1:42424: tls: first record does not look like a TLS handshake -------------------------------------------------------------------------------- /chap-11/pilot-logs.md: -------------------------------------------------------------------------------- 1 | $ kubectl logs -n istio-system -listio=pilot -c discovery 2 | ```gc 35015 @986400.568s 0%: 46+100+0.061 ms clock, 185+101/99/5.3+0.24 ms cpu, 17->18->8 MB, 18 MB goal, 4 P 3 | 2019-06-23T01:33:13.916002Z info ads LDS: PUSH for node:reviews-v1-54c7c79486-8tgsv.default addr:"127.0.0.1:44710" listeners:44 84844 4 | 2019-06-23T01:33:13.920213Z info ads ADS: "127.0.0.1:44710" sidecar~10.32.0.36~reviews-v3-6c464d7bf4-cbpb7.default~default.svc.cluster.local-28274 terminated rpc error: code = Canceled desc = context canceled 5 | gc 35016 @986401.120s 0%: 0.006+194+0.044 ms clock, 0.025+92/95/4.0+0.17 ms cpu, 16->17->9 MB, 17 MB goal, 4 P 6 | 2019-06-23T01:33:14.214721Z info ads ADS: RDS: PUSH for node: reviews-v1-54c7c79486-8tgsv.default addr:127.0.0.1:44710 routes:15 7 | 2019-06-23T01:33:14.379743Z info ads ADS:CDS: REQ 127.0.0.1:44710 sidecar~10.32.0.36~reviews-v3-6c464d7bf4-cbpb7.default~default.svc.cluster.local-28282 155.483µs raw: version_info:"2019-06-17T22:47:46Z/24" node: > fields: > fields: > fields: > fields: > fields: > fields: > fields: > fields: > fields: > fields: > > locality:<> build_version:"73fa9b1f29f91029cc2485a685994a0d1dbcde21/1.11.0-dev/Clean/RELEASE/BoringSSL" > type_url:"type.googleapis.com/envoy.api.v2.Cluster" response_nonce:"26cad090-280f-4718-bc88-500c0350bd8c" 8 | 2019-06-23T01:33:14.380604Z info ads CDS: PUSH 2019-06-17T22:47:46Z/24 for sidecar~10.32.0.36~reviews-v3-6c464d7bf4-cbpb7.default~default.svc.cluster.local-28282 "127.0.0.1:44710", Clusters: 67, Services 27 9 | gc 35017 @986401.716s 0%: 0.044+100+98 ms clock, 0.17+1.4/99/98+392 ms cpu, 17->18->9 MB, 18 MB goal, 4 P 10 | 2019-06-23T01:33:14.817914Z info ads LDS: PUSH for node:reviews-v3-6c464d7bf4-cbpb7.default addr:"127.0.0.1:44710" listeners:44 84844 11 | 2019-06-23T01:33:15.015311Z info ads ADS: RDS: PUSH for node: reviews-v3-6c464d7bf4-cbpb7.default addr:127.0.0.1:44710 routes:15``` 12 | -------------------------------------------------------------------------------- /chap-11/pilot-registration-example.json: -------------------------------------------------------------------------------- 1 | [ 2 | { 3 | "service-key": "consul-consul-connect-injector-svc.consul.svc.cluster.local", 4 | "hosts": [ 5 | { 6 | "ip_address": "10.32.0.42", 7 | "port": 8080 8 | } 9 | ] 10 | }, 11 | { 12 | "service-key": "consul-consul-dns.consul.svc.cluster.local|dns-tcp", 13 | "hosts": [] 14 | }, 15 | { 16 | "service-key": "consul-consul-dns.consul.svc.cluster.local|dns-udp", 17 | "hosts": [] 18 | }, 19 | { 20 | "service-key": "consul-consul-server.consul.svc.cluster.local|dns-tcp", 21 | "hosts": [] 22 | }, 23 | { 24 | "service-key": "consul-consul-server.consul.svc.cluster.local|dns-udp", 25 | "hosts": [] 26 | }, 27 | { 28 | "service-key": "consul-consul-server.consul.svc.cluster.local|http", 29 | "hosts": [] 30 | }, 31 | { 32 | "service-key": "consul-consul-server.consul.svc.cluster.local|serflan-tcp", 33 | "hosts": [] 34 | }, 35 | { 36 | "service-key": "consul-consul-server.consul.svc.cluster.local|serflan-udp", 37 | "hosts": [] 38 | }, 39 | { 40 | "service-key": "consul-consul-server.consul.svc.cluster.local|serfwan-tcp", 41 | "hosts": [] 42 | }, 43 | { 44 | "service-key": "consul-consul-server.consul.svc.cluster.local|serfwan-udp", 45 | "hosts": [] 46 | }, 47 | { 48 | "service-key": "consul-consul-server.consul.svc.cluster.local|server", 49 | "hosts": [] 50 | }, 51 | { 52 | "service-key": "consul-consul-ui.consul.svc.cluster.local|http", 53 | "hosts": [] 54 | }, 55 | { 56 | "service-key": "details.default.svc.cluster.local|http", 57 | "hosts": [ 58 | { 59 | "ip_address": "10.32.0.22", 60 | "port": 9080 61 | } 62 | ] 63 | }, 64 | { 65 | "service-key": "grafana.istio-system.svc.cluster.local|http", 66 | "hosts": [ 67 | { 68 | "ip_address": "10.32.0.33", 69 | "port": 3000 70 | } 71 | ] 72 | }, 73 | { 74 | "service-key": "httpbin.consul.svc.cluster.local|http", 75 | "hosts": [ 76 | { 77 | "ip_address": "10.32.0.40", 78 | "port": 80 79 | } 80 | ] 81 | }, 82 | { 83 | "service-key": "istio-citadel.istio-system.svc.cluster.local|grpc-citadel", 84 | "hosts": [ 85 | { 86 | "ip_address": "10.32.0.31", 87 | "port": 8060 88 | } 89 | ] 90 | }, 91 | { 92 | "service-key": "istio-citadel.istio-system.svc.cluster.local|http-monitoring", 93 | "hosts": [ 94 | { 95 | "ip_address": "10.32.0.31", 96 | "port": 15014 97 | } 98 | ] 99 | }, 100 | { 101 | "service-key": "istio-egressgateway.istio-system.svc.cluster.local|http2", 102 | "hosts": [ 103 | { 104 | "ip_address": "10.32.0.35", 105 | "port": 80 106 | } 107 | ] 108 | }, 109 | { 110 | "service-key": "istio-egressgateway.istio-system.svc.cluster.local|https", 111 | "hosts": [ 112 | { 113 | "ip_address": "10.32.0.35", 114 | "port": 443 115 | } 116 | ] 117 | }, 118 | { 119 | "service-key": "istio-egressgateway.istio-system.svc.cluster.local|tls", 120 | "hosts": [ 121 | { 122 | "ip_address": "10.32.0.35", 123 | "port": 15443 124 | } 125 | ] 126 | }, 127 | { 128 | "service-key": "istio-galley.istio-system.svc.cluster.local|grpc-mcp", 129 | "hosts": [ 130 | { 131 | "ip_address": "10.32.0.32", 132 | "port": 9901 133 | } 134 | ] 135 | }, 136 | { 137 | "service-key": "istio-galley.istio-system.svc.cluster.local|http-monitoring", 138 | "hosts": [ 139 | { 140 | "ip_address": "10.32.0.32", 141 | "port": 15014 142 | } 143 | ] 144 | }, 145 | { 146 | "service-key": "istio-galley.istio-system.svc.cluster.local|https-validation", 147 | "hosts": [ 148 | { 149 | "ip_address": "10.32.0.32", 150 | "port": 443 151 | } 152 | ] 153 | }, 154 | { 155 | "service-key": "istio-ingressgateway.istio-system.svc.cluster.local|http2", 156 | "hosts": [ 157 | { 158 | "ip_address": "10.32.0.30", 159 | "port": 80 160 | } 161 | ] 162 | }, 163 | { 164 | "service-key": "istio-ingressgateway.istio-system.svc.cluster.local|https", 165 | "hosts": [ 166 | { 167 | "ip_address": "10.32.0.30", 168 | "port": 443 169 | } 170 | ] 171 | }, 172 | { 173 | "service-key": "istio-ingressgateway.istio-system.svc.cluster.local|https-grafana", 174 | "hosts": [ 175 | { 176 | "ip_address": "10.32.0.30", 177 | "port": 15031 178 | } 179 | ] 180 | }, 181 | { 182 | "service-key": "istio-ingressgateway.istio-system.svc.cluster.local|https-kiali", 183 | "hosts": [ 184 | { 185 | "ip_address": "10.32.0.30", 186 | "port": 15029 187 | } 188 | ] 189 | }, 190 | { 191 | "service-key": "istio-ingressgateway.istio-system.svc.cluster.local|https-prometheus", 192 | "hosts": [ 193 | { 194 | "ip_address": "10.32.0.30", 195 | "port": 15030 196 | } 197 | ] 198 | }, 199 | { 200 | "service-key": "istio-ingressgateway.istio-system.svc.cluster.local|https-tracing", 201 | "hosts": [ 202 | { 203 | "ip_address": "10.32.0.30", 204 | "port": 15032 205 | } 206 | ] 207 | }, 208 | { 209 | "service-key": "istio-ingressgateway.istio-system.svc.cluster.local|status-port", 210 | "hosts": [ 211 | { 212 | "ip_address": "10.32.0.30", 213 | "port": 15020 214 | } 215 | ] 216 | }, 217 | { 218 | "service-key": "istio-ingressgateway.istio-system.svc.cluster.local|tcp", 219 | "hosts": [ 220 | { 221 | "ip_address": "10.32.0.30", 222 | "port": 31400 223 | } 224 | ] 225 | }, 226 | { 227 | "service-key": "istio-ingressgateway.istio-system.svc.cluster.local|tls", 228 | "hosts": [ 229 | { 230 | "ip_address": "10.32.0.30", 231 | "port": 15443 232 | } 233 | ] 234 | }, 235 | { 236 | "service-key": "istio-pilot.istio-system.svc.cluster.local|grpc-xds", 237 | "hosts": [ 238 | { 239 | "ip_address": "10.32.0.24", 240 | "port": 15010 241 | } 242 | ] 243 | }, 244 | { 245 | "service-key": "istio-pilot.istio-system.svc.cluster.local|http-legacy-discovery", 246 | "hosts": [ 247 | { 248 | "ip_address": "10.32.0.24", 249 | "port": 8080 250 | } 251 | ] 252 | }, 253 | { 254 | "service-key": "istio-pilot.istio-system.svc.cluster.local|http-monitoring", 255 | "hosts": [ 256 | { 257 | "ip_address": "10.32.0.24", 258 | "port": 15014 259 | } 260 | ] 261 | }, 262 | { 263 | "service-key": "istio-pilot.istio-system.svc.cluster.local|https-xds", 264 | "hosts": [ 265 | { 266 | "ip_address": "10.32.0.24", 267 | "port": 15011 268 | } 269 | ] 270 | }, 271 | { 272 | "service-key": "istio-policy.istio-system.svc.cluster.local|grpc-mixer", 273 | "hosts": [ 274 | { 275 | "ip_address": "10.32.0.26", 276 | "port": 9091 277 | } 278 | ] 279 | }, 280 | { 281 | "service-key": "istio-policy.istio-system.svc.cluster.local|grpc-mixer-mtls", 282 | "hosts": [ 283 | { 284 | "ip_address": "10.32.0.26", 285 | "port": 15004 286 | } 287 | ] 288 | }, 289 | { 290 | "service-key": "istio-policy.istio-system.svc.cluster.local|http-monitoring", 291 | "hosts": [ 292 | { 293 | "ip_address": "10.32.0.26", 294 | "port": 15014 295 | } 296 | ] 297 | }, 298 | { 299 | "service-key": "istio-sidecar-injector.istio-system.svc.cluster.local", 300 | "hosts": [ 301 | { 302 | "ip_address": "10.32.0.34", 303 | "port": 443 304 | } 305 | ] 306 | }, 307 | { 308 | "service-key": "istio-telemetry.istio-system.svc.cluster.local|grpc-mixer", 309 | "hosts": [ 310 | { 311 | "ip_address": "10.32.0.28", 312 | "port": 9091 313 | } 314 | ] 315 | }, 316 | { 317 | "service-key": "istio-telemetry.istio-system.svc.cluster.local|grpc-mixer-mtls", 318 | "hosts": [ 319 | { 320 | "ip_address": "10.32.0.28", 321 | "port": 15004 322 | } 323 | ] 324 | }, 325 | { 326 | "service-key": "istio-telemetry.istio-system.svc.cluster.local|http-monitoring", 327 | "hosts": [ 328 | { 329 | "ip_address": "10.32.0.28", 330 | "port": 15014 331 | } 332 | ] 333 | }, 334 | { 335 | "service-key": "istio-telemetry.istio-system.svc.cluster.local|prometheus", 336 | "hosts": [ 337 | { 338 | "ip_address": "10.32.0.28", 339 | "port": 42422 340 | } 341 | ] 342 | }, 343 | { 344 | "service-key": "jaeger-agent.istio-system.svc.cluster.local|agent-binary", 345 | "hosts": [ 346 | { 347 | "ip_address": "10.32.0.29", 348 | "port": 6832 349 | } 350 | ] 351 | }, 352 | { 353 | "service-key": "jaeger-agent.istio-system.svc.cluster.local|agent-compact", 354 | "hosts": [ 355 | { 356 | "ip_address": "10.32.0.29", 357 | "port": 6831 358 | } 359 | ] 360 | }, 361 | { 362 | "service-key": "jaeger-agent.istio-system.svc.cluster.local|agent-zipkin-thrift", 363 | "hosts": [ 364 | { 365 | "ip_address": "10.32.0.29", 366 | "port": 5775 367 | } 368 | ] 369 | }, 370 | { 371 | "service-key": "jaeger-collector.istio-system.svc.cluster.local|jaeger-collector-http", 372 | "hosts": [ 373 | { 374 | "ip_address": "10.32.0.29", 375 | "port": 14268 376 | } 377 | ] 378 | }, 379 | { 380 | "service-key": "jaeger-collector.istio-system.svc.cluster.local|jaeger-collector-tchannel", 381 | "hosts": [ 382 | { 383 | "ip_address": "10.32.0.29", 384 | "port": 14267 385 | } 386 | ] 387 | }, 388 | { 389 | "service-key": "jaeger-query.istio-system.svc.cluster.local|query-http", 390 | "hosts": [ 391 | { 392 | "ip_address": "10.32.0.29", 393 | "port": 16686 394 | } 395 | ] 396 | }, 397 | { 398 | "service-key": "kiali.istio-system.svc.cluster.local|http-kiali", 399 | "hosts": [ 400 | { 401 | "ip_address": "10.32.0.21", 402 | "port": 20001 403 | } 404 | ] 405 | }, 406 | { 407 | "service-key": "kube-dns.kube-system.svc.cluster.local|dns", 408 | "hosts": [ 409 | { 410 | "ip_address": "10.32.0.27", 411 | "port": 53 412 | }, 413 | { 414 | "ip_address": "10.40.0.2", 415 | "port": 53 416 | } 417 | ] 418 | }, 419 | { 420 | "service-key": "kube-dns.kube-system.svc.cluster.local|dns-tcp", 421 | "hosts": [ 422 | { 423 | "ip_address": "10.32.0.27", 424 | "port": 53 425 | }, 426 | { 427 | "ip_address": "10.40.0.2", 428 | "port": 53 429 | } 430 | ] 431 | }, 432 | { 433 | "service-key": "kube-dns.kube-system.svc.cluster.local|metrics", 434 | "hosts": [ 435 | { 436 | "ip_address": "10.32.0.27", 437 | "port": 9153 438 | }, 439 | { 440 | "ip_address": "10.40.0.2", 441 | "port": 9153 442 | } 443 | ] 444 | }, 445 | { 446 | "service-key": "kubernetes.default.svc.cluster.local|https", 447 | "hosts": [ 448 | { 449 | "ip_address": "10.199.75.64", 450 | "port": 6443 451 | } 452 | ] 453 | }, 454 | { 455 | "service-key": "productpage.default.svc.cluster.local|http", 456 | "hosts": [ 457 | { 458 | "ip_address": "10.32.0.38", 459 | "port": 9080 460 | } 461 | ] 462 | }, 463 | { 464 | "service-key": "prometheus.istio-system.svc.cluster.local|http-prometheus", 465 | "hosts": [ 466 | { 467 | "ip_address": "10.32.0.39", 468 | "port": 9090 469 | } 470 | ] 471 | }, 472 | { 473 | "service-key": "ratings.default.svc.cluster.local|http", 474 | "hosts": [ 475 | { 476 | "ip_address": "10.32.0.25", 477 | "port": 9080 478 | } 479 | ] 480 | }, 481 | { 482 | "service-key": "reviews.default.svc.cluster.local|http", 483 | "hosts": [ 484 | { 485 | "ip_address": "10.32.0.23", 486 | "port": 9080 487 | }, 488 | { 489 | "ip_address": "10.32.0.36", 490 | "port": 9080 491 | }, 492 | { 493 | "ip_address": "10.32.0.37", 494 | "port": 9080 495 | } 496 | ] 497 | }, 498 | { 499 | "service-key": "tracing.istio-system.svc.cluster.local|http-query", 500 | "hosts": [ 501 | { 502 | "ip_address": "10.32.0.29", 503 | "port": 16686 504 | } 505 | ] 506 | }, 507 | { 508 | "service-key": "zipkin.istio-system.svc.cluster.local|http", 509 | "hosts": [ 510 | { 511 | "ip_address": "10.32.0.29", 512 | "port": 9411 513 | } 514 | ] 515 | } 516 | ] 517 | -------------------------------------------------------------------------------- /chap-12/httpbin-cross-cluster-svcentry.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: ServiceEntry 3 | metadata: 4 | name: httpbin-remote 5 | spec: 6 | hosts: 7 | - httpbin.remote.global # remote postfix is used for Istio’s DNS plugin 8 | location: MESH_INTERNAL # make sure we use mTLS 9 | ports: 10 | - name: http 11 | number: 8000 12 | protocol: http 13 | resolution: DNS 14 | addresses: 15 | # does not need to be routable, but needs to be unique for each service you’re 16 | # routing across clusters; used by Istio’s DNS plugin 17 | - 127.255.0.2 18 | endpoints: 19 | - address: 1.2.3.4 # address of our remote cluster’s ingress 20 | ports: 21 | # Do not change this port value if you’re using the Istio multi cluster installation 22 | http: 15443 -------------------------------------------------------------------------------- /chap-12/httpbin-cross-cluster-vs.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | name: httpbin 5 | spec: 6 | hosts: 7 | - "*" 8 | gateways: 9 | - httpbin-gateway 10 | - mesh # also direct traffic in the mesh with the same VirtualService 11 | http: 12 | - route: 13 | - destination: 14 | host: httpbin.remote.global 15 | port: 16 | number: 8000 -------------------------------------------------------------------------------- /chap-12/httpbin-depl-v2.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: extensions/v1beta1 2 | kind: Deployment 3 | metadata: 4 | name: httpbin-v2 5 | spec: 6 | replicas: 1 7 | template: 8 | metadata: 9 | labels: 10 | app: httpbin 11 | version: v2 12 | spec: 13 | containers: 14 | - image: docker.io/kennethreitz/httpbin 15 | imagePullPolicy: IfNotPresent 16 | name: httpbin 17 | ports: 18 | - containerPort: 80 -------------------------------------------------------------------------------- /chap-12/httpbin-destination-v2.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: DestinationRule 3 | metadata: 4 | name: httpbin 5 | spec: 6 | host: httpbin 7 | subsets: 8 | - name: v1 9 | labels: 10 | version: v1 11 | - name: v2 12 | labels: 13 | version: v2 -------------------------------------------------------------------------------- /chap-12/httpbin-gw-vs.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: Gateway 3 | metadata: 4 | name: httpbin-gateway 5 | spec: 6 | selector: 7 | istio: ingressgateway 8 | servers: 9 | - port: 10 | number: 80 11 | name: http 12 | protocol: HTTP 13 | hosts: 14 | - "*" 15 | --- 16 | apiVersion: networking.istio.io/v1alpha3 17 | kind: VirtualService 18 | metadata: 19 | name: httpbin 20 | spec: 21 | hosts: 22 | - "httpbin.svc.default.cluster.local" 23 | gateways: 24 | - httpbin-gateway 25 | - mesh # also direct traffic in the mesh with the same VirtualService 26 | http: 27 | - route: 28 | - destination: 29 | host: httpbin 30 | port: 31 | number: 8000 -------------------------------------------------------------------------------- /chap-12/httpbin-svc-depl.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: httpbin 5 | labels: 6 | app: httpbin 7 | spec: 8 | ports: 9 | - name: http 10 | port: 8000 11 | targetPort: 80 12 | selector: 13 | app: httpbin 14 | --- 15 | apiVersion: extensions/v1beta1 16 | kind: Deployment 17 | metadata: 18 | name: httpbin-v1 19 | spec: 20 | replicas: 1 21 | template: 22 | metadata: 23 | labels: 24 | app: httpbin 25 | version: v1 26 | spec: 27 | containers: 28 | - image: docker.io/kennethreitz/httpbin 29 | imagePullPolicy: IfNotPresent 30 | name: httpbin 31 | ports: 32 | - containerPort: 80 -------------------------------------------------------------------------------- /chap-12/httpbin-vs-v1.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | name: httpbin 5 | spec: 6 | hosts: 7 | - "*" 8 | gateways: 9 | - httpbin-gateway 10 | http: 11 | - route: 12 | - destination: 13 | host: httpbin 14 | subset: v1 15 | port: 16 | number: 8000 -------------------------------------------------------------------------------- /chap-12/httpbin-vs-v2-5.yaml: -------------------------------------------------------------------------------- 1 | 2 | apiVersion: networking.istio.io/v1alpha3 3 | kind: VirtualService 4 | metadata: 5 | name: httpbin 6 | spec: 7 | hosts: 8 | - "*" 9 | gateways: 10 | - httpbin-gateway 11 | - mesh # also direct traffic in the mesh with the same VirtualService 12 | http: 13 | - route: 14 | - destination: 15 | host: httpbin 16 | subset: v1 17 | port: 18 | number: 8000 19 | weight: 95 20 | - destination: 21 | host: httpbin 22 | subset: v2 23 | port: 24 | number: 8000 25 | weight: 5 -------------------------------------------------------------------------------- /chap-13/bookinfo-vs.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | generation: 1 5 | name: bookinfo-vs 6 | namespace: "default" 7 | resourceVersion: "" 8 | selfLink: /apis/networking.istio.io/v1alpha3/namespaces/default/virtualservices/bookinfo-vs 9 | uid: "" 10 | spec: 11 | gateways: 12 | - ingress-gateway 13 | hosts: 14 | - '*' 15 | http: 16 | - match: 17 | - uri: 18 | prefix: /productpage 19 | route: 20 | - destination: 21 | host: productpage -------------------------------------------------------------------------------- /chap-13/egress-serviceentry-a.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: ServiceEntry 3 | metadata: 4 | generation: 1 5 | name: egress-service-entry 6 | namespace: "default" 7 | resourceVersion: "" 8 | selfLink: /apis/networking.istio.io/v1alpha3/namespaces/default/serviceentries/egress-service-entry 9 | uid: "" 10 | spec: 11 | endpoints: 12 | - address: # 13 | hosts: 14 | - svc.cluster-b.remote 15 | location: MESH_EXTERNAL 16 | ports: 17 | - name: https 18 | number: 443 19 | protocol: HTTPS 20 | resolution: DNS -------------------------------------------------------------------------------- /chap-13/egress-serviceentry-b.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: ServiceEntry 3 | metadata: 4 | generation: 1 5 | name: egress-service-entry 6 | namespace: "default" 7 | resourceVersion: "" 8 | selfLink: /apis/networking.istio.io/v1alpha3/namespaces/default/serviceentries/egress-service-entry 9 | uid: "" 10 | spec: 11 | endpoints: 12 | - address: # 13 | hosts: 14 | - svc.cluster-a.remote 15 | location: MESH_EXTERNAL 16 | ports: 17 | - name: https 18 | number: 443 19 | protocol: HTTPS 20 | resolution: DNS -------------------------------------------------------------------------------- /chap-13/ingress-gw.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: Gateway 3 | metadata: 4 | generation: 1 5 | name: ingress-gateway 6 | namespace: "default" 7 | resourceVersion: "" 8 | selfLink: /apis/networking.istio.io/v1alpha3/namespaces/default/gateways/ingress-gateway 9 | uid: "" 10 | spec: 11 | selector: 12 | istio: ingressgateway 13 | servers: 14 | - hosts: 15 | - '*' 16 | port: 17 | name: http 18 | number: 80 19 | protocol: HTTP 20 | - hosts: 21 | - '*' 22 | port: 23 | name: https 24 | number: 443 25 | protocol: HTTPS 26 | tls: 27 | caCertificates: /etc/istio/ingressgateway-ca-certs/ca-chain.cert.pem 28 | mode: MUTUAL 29 | privateKey: /etc/istio/ingressgateway-certs/tls.key 30 | serverCertificate: /etc/istio/ingressgateway-certs/tls.crt -------------------------------------------------------------------------------- /chap-13/istiocoredns.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ConfigMap 3 | metadata: 4 | name: coredns 5 | namespace: kube-system 6 | data: 7 | Corefile: | 8 | .:53 { 9 | errors 10 | health 11 | kubernetes cluster.local in-addr.arpa ip6.arpa { 12 | upstream 13 | pods insecure 14 | fallthrough in-addr.arpa ip6.arpa 15 | } 16 | prometheus :9153 17 | proxy . /etc/resolv.conf 18 | cache 30 19 | loadbalance 20 | loop 21 | reload 22 | 23 | } 24 | global:53 { 25 | errors 26 | cache 30 27 | proxy . $(kubectl -n istio-system get svc istiocoredns -o jsonpath={.spec.clusterIP}) 28 | } -------------------------------------------------------------------------------- /chap-13/reviews-destinationrule.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: DestinationRule 3 | metadata: 4 | generation: 1 5 | name: reviews-tls-origination 6 | namespace: "default" 7 | resourceVersion: "" 8 | selfLink: /apis/networking.istio.io/v1alpha3/namespaces/default/destinationrules/reviews-tls-origination 9 | uid: "" 10 | spec: 11 | host: svc.cluster-b.remote 12 | trafficPolicy: 13 | portLevelSettings: 14 | - port: 15 | number: 443 16 | tls: 17 | caCertificates: /etc/certs/cert-chain.pem 18 | clientCertificate: /etc/certs/cert-chain.pem 19 | mode: MUTUAL 20 | privateKey: /etc/certs/key.pem -------------------------------------------------------------------------------- /chap-13/reviews-ingress-virtual-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | generation: 1 5 | name: reviews-ingress-virtual-service 6 | namespace: "default" 7 | resourceVersion: "" 8 | selfLink: /apis/networking.istio.io/v1alpha3/namespaces/default/virtualservices/reviews-ingress-virtual-service 9 | uid: "" 10 | spec: 11 | gateways: 12 | - ingress-gateway 13 | hosts: 14 | - reviews.default.svc.cluster-b.remote 15 | http: 16 | - route: 17 | - destination: 18 | host: reviews -------------------------------------------------------------------------------- /chap-13/reviews-virtualservice.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | generation: 1 5 | name: reviews-egress-splitter-virtual-service 6 | namespace: "default" 7 | resourceVersion: "" 8 | selfLink: /apis/networking.istio.io/v1alpha3/namespaces/default/virtualservices/reviews-egress-splitter-virtual-service 9 | uid: "" 10 | spec: 11 | hosts: 12 | - reviews.default.svc.cluster.local 13 | http: 14 | - rewrite: 15 | authority: reviews.default.svc.cluster-b.remote 16 | route: 17 | - destination: 18 | host: svc.cluster-b.remote 19 | port: 20 | number: 443 21 | weight: 50 22 | - destination: 23 | host: reviews 24 | weight: 50 -------------------------------------------------------------------------------- /chap-7/foo-gw.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: Gateway 3 | metadata: 4 | name: foo-com-gateway 5 | spec: 6 | selector: 7 | istio: ingressgateway 8 | servers: 9 | - hosts: 10 | - "*.foo.com" 11 | port: 12 | number: 80 13 | name: http 14 | protocol: HTTP -------------------------------------------------------------------------------- /chap-7/foo-routes.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | name: foo-default 5 | spec: 6 | hosts: 7 | - bar.foo.com 8 | gateways: 9 | - foo-com-gateway 10 | http: 11 | - match: 12 | - uri: 13 | prefix: /whiz 14 | route: 15 | - destination: 16 | host: whiz.foo.svc.cluster.local 17 | - route: 18 | - destination: 19 | host: bar.foo.svc.cluster.local -------------------------------------------------------------------------------- /chap-7/foo-vs.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | name: foo-default 5 | spec: 6 | hosts: 7 | - bar.foo.com 8 | gateways: 9 | - foo-com-gateway 10 | http: 11 | - route: 12 | - destination: 13 | host: bar.foo.svc.cluster.local -------------------------------------------------------------------------------- /chap-7/some-domain-dest.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: DestinationRule 3 | metadata: 4 | name: some-domain-com 5 | spec: 6 | host: some.domain.com 7 | subsets: 8 | - name: v1 9 | labels: 10 | version: v1 11 | - name: v2 12 | labels: 13 | version: v2 -------------------------------------------------------------------------------- /chap-7/some-domain-se.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: ServiceEntry 3 | metadata: 4 | name: http-server 5 | spec: 6 | hosts: 7 | - some.domain.com 8 | ports: 9 | - number: 80 10 | name: http 11 | protocol: http 12 | resolution: STATIC 13 | endpoints: 14 | - address: 2.2.2.2 -------------------------------------------------------------------------------- /chap-8/canary-cookie.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | name: foo-canary-virtual-service 5 | spec: 6 | hosts: 7 | - foo.default.svc.cluster.local 8 | http: 9 | - match: 10 | - headers: 11 | cookie: 12 | trusted-tester: "true" 13 | route: 14 | - destination: 15 | host: foo.default.svc.cluster.local 16 | subset: test 17 | - route: 18 | - destination: 19 | host: foo.default.svc.cluster.local 20 | subset: v1 -------------------------------------------------------------------------------- /chap-8/canary-shift.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | name: foo-canary-virtual-service 5 | spec: 6 | hosts: 7 | - foo.default.svc.cluster.local 8 | tcp: 9 | - route: 10 | - destination: 11 | host: foo.default.svc.cluster.local 12 | subset: v2 13 | weight: 5 14 | - destination: 15 | host: foo.default.svc.cluster.local 16 | subset: v1 17 | weight: 95 -------------------------------------------------------------------------------- /chap-8/dns-se.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: ServiceEntry 3 | metadata: 4 | name: external-svc-dns 5 | spec: 6 | hosts: 7 | - foo.bar.com 8 | location: MESH_EXTERNAL 9 | ports: 10 | - number: 443 11 | name: https 12 | protocol: HTTP 13 | resolution: DNS 14 | endpoints: 15 | - address: baz.com -------------------------------------------------------------------------------- /chap-8/egress-destrule.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: DestinationRule 3 | metadata: 4 | name: google.com 5 | spec: 6 | host: "*.google.com" 7 | trafficPolicy: 8 | tls: 9 | mode: SIMPLE -------------------------------------------------------------------------------- /chap-8/egress-gw-wiki.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: Gateway 3 | metadata: 4 | name: https-wikipedia-org-egress 5 | spec: 6 | selector: 7 | istio: egressgateway 8 | servers: 9 | - port: 10 | number: 443 11 | name: https-wikipedia-org-egress-443 12 | protocol: TLS # Mark as TLS as we are passing HTTPS through. 13 | hosts: 14 | - wikipedia.org 15 | tls: 16 | mode: PASSTHROUGH 17 | -------------------------------------------------------------------------------- /chap-8/foo-vs.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | name: foo-com-virtual-service 5 | spec: 6 | hosts: 7 | - foo.com 8 | gateways: 9 | - foo-com-gateway 10 | http: 11 | - route: 12 | - destination: 13 | host: webserver.foo.svc.cluster.local 14 | -------------------------------------------------------------------------------- /chap-8/gw-examples.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: Gateway 3 | metadata: 4 | name: foo-gateway 5 | spec: 6 | selector: 7 | app: my-gateway-impl 8 | servers: 9 | - hosts: 10 | - foo.com 11 | port: 12 | number: 80 13 | name: http 14 | protocol: HTTP 15 | --- 16 | apiVersion: networking.istio.io/v1alpha3 17 | kind: Gateway 18 | metadata: 19 | name: wildcard-gateway 20 | spec: 21 | selector: 22 | app: my-gateway-impl 23 | servers: 24 | - hosts: 25 | - *.com 26 | port: 27 | number: 80 28 | name: http 29 | protocol: HTTP 30 | -------------------------------------------------------------------------------- /chap-8/gw-https-upgrade.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: Gateway 3 | metadata: 4 | name: foo-com-gateway 5 | spec: 6 | selector: 7 | app: gateway-workloads 8 | servers: 9 | - hosts: 10 | - foo.com 11 | port: 12 | number: 80 13 | name: http 14 | protocol: HTTP 15 | tls: 16 | httpsRedirect: true # sends 301 redirect for http requests 17 | - hosts: 18 | - foo.com 19 | port: 20 | number: 443 21 | name: https 22 | protocol: HTTPS 23 | tls: 24 | mode: SIMPLE #enables HTTPS on this port 25 | serverCertificate: /etc/certs/foo-com-public.pem 26 | privateKey: /etc/certs/foo-com-privatekey.pem -------------------------------------------------------------------------------- /chap-8/gw-https.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: Gateway 3 | metadata: 4 | name: foo-com-gateway 5 | spec: 6 | selector: 7 | app: gateway-workloads 8 | servers: 9 | - hosts: 10 | - foo.com 11 | port: 12 | number: 443 13 | name: https 14 | protocol: HTTPS 15 | tls: 16 | mode: SIMPLE #enables HTTPS on this port 17 | serverCertificate: /etc/certs/foo-com-public.pem 18 | privateKey: /etc/certs/foo-com-privatekey.pem -------------------------------------------------------------------------------- /chap-8/gw-to-vses.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: Gateway 3 | metadata: 4 | name: foo-com-gateway 5 | spec: 6 | selector: 7 | app: gateway-workloads 8 | servers: 9 | - hosts: 10 | - *.foo.com 11 | port: 12 | number: 80 13 | name: http 14 | protocol: HTTP 15 | --- 16 | apiVersion: networking.istio.io/v1alpha3 17 | kind: VirtualService 18 | metadata: 19 | name: foo-com-virtual-service 20 | spec: 21 | hosts: 22 | - api.foo.com 23 | gateways: 24 | - foo-com-gateway 25 | http: 26 | - route: 27 | - destination: 28 | host: api.foo.svc.cluster.local 29 | --- 30 | apiVersion: networking.istio.io/v1alpha3 31 | kind: VirtualService 32 | metadata: 33 | name: foo-com-virtual-service 34 | spec: 35 | hosts: 36 | - www.foo.com 37 | gateways: 38 | - foo-com-gateway 39 | http: 40 | - route: 41 | - destination: 42 | host: webserver.foo.svc.cluster.local 43 | -------------------------------------------------------------------------------- /chap-8/k8s-se.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: ServiceEntry 3 | metadata: 4 | name: k8s-my-service 5 | spec: 6 | hosts: 7 | # the names an application can use in k8s to target this service 8 | - my-service 9 | - my-service.default 10 | - my-service.default.svc.cluster.local 11 | ports: 12 | - number: 80 13 | name: http 14 | protocol: HTTP 15 | resolution: STATIC 16 | endpoints: 17 | - address: 1.2.3.4 18 | -------------------------------------------------------------------------------- /chap-8/per-try-timeout.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | name: foo-default 5 | spec: 6 | hosts: 7 | - foo.com 8 | gateways: 9 | - foo-gateway 10 | http: 11 | - route: 12 | - destination: 13 | host: foo.default.svc.cluster.local 14 | timeout: 2s 15 | retries: 16 | attempts: 3 17 | perTryTimeout: 500ms -------------------------------------------------------------------------------- /chap-8/round-robin.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: DestinationRule 3 | metadata: 4 | name: foo-default 5 | spec: 6 | host: foo.default.svc.cluster.local 7 | trafficPolicy: 8 | loadBalancer: 9 | simple: ROUND_ROBIN -------------------------------------------------------------------------------- /chap-8/se-egress-gw.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: ServiceEntry 3 | metadata: 4 | name: https-wikipedia-org 5 | spec: 6 | hosts: 7 | - wikipedia.org 8 | ports: 9 | - number: 443 10 | name: https 11 | protocol: HTTPS 12 | location: MESH_EXTERNAL 13 | resolution: DNS 14 | endpoints: 15 | - address: istio-egressgateway.istio-system.svc.cluster.local 16 | ports: 17 | http: 443 -------------------------------------------------------------------------------- /chap-8/static-se.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: ServiceEntry 3 | metadata: 4 | name: http-server 5 | spec: 6 | hosts: 7 | - some.domain.com 8 | ports: 9 | - number: 80 10 | name: http 11 | protocol: http 12 | resolution: STATIC 13 | endpoints: 14 | - address: 2.2.2.2 -------------------------------------------------------------------------------- /chap-8/svc-endpoint.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: my-service 5 | spec: 6 | selector: 7 | app: MyApp 8 | ports: 9 | - protocol: TCP 10 | port: 80 11 | --- 12 | apiVersion: v1 13 | kind: Endpoints 14 | metadata: 15 | name: my-service 16 | subsets: 17 | - addresses: 18 | - ip: 1.2.3.4 19 | ports: 20 | - port: 80 -------------------------------------------------------------------------------- /chap-8/timeout.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | name: foo-default 5 | spec: 6 | hosts: 7 | - foo.com 8 | gateways: 9 | - foo-gateway 10 | http: 11 | - route: 12 | - destination: 13 | host: foo.default.svc.cluster.local 14 | timeout: 1s -------------------------------------------------------------------------------- /chap-8/vs-examples.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | name: foo-default 5 | spec: 6 | hosts: 7 | - foo.com 8 | gateways: 9 | - foo-gateway 10 | http: 11 | - route: 12 | - destination: 13 | host: foo.default.svc.cluster.local 14 | --- 15 | apiVersion: networking.istio.io/v1alpha3 16 | kind: VirtualService 17 | metadata: 18 | name: foo-default 19 | spec: 20 | hosts: 21 | - foo.com 22 | - foo.super.secret.internal.name 23 | gateways: 24 | - foo-gateway 25 | http: 26 | - route: 27 | - destination: 28 | host: foo.default.svc.cluster.local 29 | --- 30 | apiVersion: networking.istio.io/v1alpha3 31 | kind: VirtualService 32 | metadata: 33 | name: foo-internal 34 | spec: 35 | hosts: 36 | - foo.super.secret.internal.name 37 | gateways: 38 | - foo-gateway 39 | - wildcard-gateway 40 | http: 41 | - route: 42 | - destination: 43 | host: foo.default.svc.cluster.local 44 | --- 45 | apiVersion: networking.istio.io/v1alpha3 46 | kind: VirtualService 47 | metadata: 48 | name: foo-internal 49 | spec: 50 | hosts: 51 | - foo.com 52 | gateways: 53 | - foo-gateway 54 | - wildcard-gateway 55 | http: 56 | - route: 57 | - destination: 58 | host: foo.default.svc.cluster.local 59 | --------------------------------------------------------------------------------