Replies: 8 comments 1 reply
-
You can set your own access log format: https://istio.io/latest/docs/tasks/observability/logs/access-log/#default-access-log-format |
Beta Was this translation helpful? Give feedback.
-
Or just turn off access logs. They are not actually enabled by default either. |
Beta Was this translation helpful? Give feedback.
-
I'd like to do this at a sidecar level, as our team does not administer Istio, tried the below to set the accessLogFormat to minimal but the behavior persists. Any other suggestions? |
Beta Was this translation helpful? Give feedback.
-
https://istio.io/latest/docs/reference/config/istio.mesh.v1alpha1/ - only things under ProxyConfig (https://istio.io/latest/docs/reference/config/istio.mesh.v1alpha1/#ProxyConfig) are set in proxy.istio.io. The rest must be set in the mesh config. Generally the |
Beta Was this translation helpful? Give feedback.
-
Is there a way I can use the config at the mesh level but isolate it to specific workloads? We are on a shared cluster and wouldn't want to affect the other tenants. |
Beta Was this translation helpful? Give feedback.
-
Ah yes, https://istio.io/latest/docs/tasks/observability/telemetry/ can do that. accessLogfile is the simpler/older approach |
Beta Was this translation helpful? Give feedback.
-
If you are feeling brave, you can turn off logging with an EnvoyFilter
|
Beta Was this translation helpful? Give feedback.
-
Just saw telemetry api answer which is way better answer
|
Beta Was this translation helpful? Give feedback.
-
Is this the right place to submit this?
Bug Description
We observed that Istio (with its default logging configuration) logs the complete URL which, in our case, consists of sensitive information which we wouldn't like to be logged.
Upon research, found that, Istio OOB does not have a way to configure it to not log the queryParameters.
Tried the following but to no avail:
sidecar.istio.io/logLevel: "off"
sidecar.istio.io/componentLogLevel curl -s -X POST http:https://localhost:15000/logging?level=off
sidecar.istio.io/agentLogLevel: "default:none"
Log snapshot
Please ignore the RBAC, we have a policy defined that is working as expected, just need guidance with the logging piece.
Help appreciated!
Version
Additional Information
The relevant information is provided in the description section.
Beta Was this translation helpful? Give feedback.
All reactions