opensource/grpc-go
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added logs to rbac (#4853)

Browse Source 
Added logs to rbac
This commit is contained in:
Zach Reyes
2021-10-07 22:46:49 -04:00
committed by GitHub
parent 524d10cbce
commit 03ca7b7d00
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
internal/xds/rbac/rbac_engine.go
View File

@ -39,6 +39,8 @@ import (
"google.golang.org/grpc/status" "google.golang.org/grpc/status"
) )
const logLevel = 2
var logger = grpclog.Component("rbac") var logger = grpclog.Component("rbac")
var getConnection = transport.GetConnection var getConnection = transport.GetConnection
@ -77,6 +79,9 @@ func (cre *ChainEngine) IsAuthorized(ctx context.Context) error {
} }
for _, engine := range cre.chainedEngines { for _, engine := range cre.chainedEngines {
matchingPolicyName, ok := engine.findMatchingPolicy(rpcData) matchingPolicyName, ok := engine.findMatchingPolicy(rpcData)
if logger.V(logLevel) && ok {
logger.Infof("incoming RPC matched to policy %v in engine with action %v", matchingPolicyName, engine.action)
}
switch { switch {
case engine.action == v3rbacpb.RBAC_ALLOW && !ok: case engine.action == v3rbacpb.RBAC_ALLOW && !ok: