如何启用 Istio 日志记录

要调试 Istio，您需要启用日志记录。为此，请执行以下步骤：

1. 使用以下命令编辑istio-system命名空间中的istio配置映射：

   kubectl edit cm -n istio-system istio

2. 在data.mesh下，添加以下字段：

   accessLogFile: /dev/stdout
   logLevel: debug
   accessLogEncoding: "JSON"

   以下示例是已更新的istio配置映射的示例：

   apiVersion: v1
   data:
     mesh: |-
       accessLogFile: /dev/stdout
       logLevel: debug
       accessLogEncoding: "JSON"
       accessLogFormat: |
         {
         "start_time": "%START_TIME%",
         "trace_parent": "%REQ(TRACEPARENT)%",
         "method": "%REQ(:METHOD)%",
         "path": "%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%",
         "protocol": "%PROTOCOL%",
         "response_code": "%RESPONSE_CODE%",
         "response_flags": "%RESPONSE_FLAGS%",
         "bytes_received": "%BYTES_RECEIVED%",
         "bytes_sent": "%BYTES_SENT%",
         "duration": "%DURATION%",
         "upstream_service_time": "%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%",
         "x_forwarded_for": "%REQ(X-FORWARDED-FOR)%",
         "user_agent": "%REQ(USER-AGENT)%",
         "request_id": "%REQ(X-REQUEST-ID)%",
         "authority": "%REQ(:AUTHORITY)%",
         "upstream_host": "%UPSTREAM_HOST%"
         }
       defaultConfig:
         discoveryAddress: istiod.istio-system.svc:15012
         image:
           imageType: distroless
         proxyMetadata:
           WASM_INSECURE_REGISTRIES: '*'
       defaultProviders:
         metrics:
         - prometheus
       enablePrometheusMerge: true
       extensionProviders:
       - envoyExtAuthzHttp:
           includeHeadersInCheck:
           - authorization
           - cookie
           port: 80
           service: auth-oauth2-proxy.uipath.svc.cluster.local
         name: oauth2-proxy
       rootNamespace: istio-system
       trustDomain: cluster.local
     meshNetworks: 'networks: {}'
   kind: ConfigMap
   metadata:
     annotations:
       meta.helm.sh/release-name: istiod
       meta.helm.sh/release-namespace: istio-system
     labels:
       app.kubernetes.io/managed-by: Helm
       install.operator.istio.io/owning-resource: unknown
       istio.io/rev: default
       operator.istio.io/component: Pilot
       release: istiod
     name: istio
     namespace: istio-system
     resourceVersion: "180392"
     uid: 30647d4d-f62a-477e-ad80-c98a93f48855

3. 使用以下命令重新启动istio部署：

   kubectl rollout restart deploy/istiod -n istio-system
   kubectl rollout restart ds/istio-ingressgateway -n istio-system