Greg Hanson

Would it be worth posting an example EnvoyFilter for gateway and sidecar? For instance the following EnvoyFilter works for ingress gateway: ``` kubectl apply -n istio-system -f -

@uc-dang-tiki your EnvoyFilter is missing a `typed_config` in your patch and the filterchain `name` is incorrect: ``` apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: test-enable-accesslog spec: workloadSelector: labels: workload.user.cattle.io/workloadselector: deployment-platform-prod-prod-eris configPatches:...

@olliezhu `wget` should generate an access log entry. For example, just using the provided `samples/sleep/sleep.yaml` I was able to produce the following when targeting httpbin.org: ``` $ kubectl exec "$(kubectl...

@olliezhu are what type of workload/pod are you trying to enable access logs for? Currently you have `context: GATEWAY` - did you want to enable access logs on your ingress...

@olliezhu in the `Istio-proxy` container, there can be 3 different types of logs. There are 1. the access logs which you have configured with the EnvoyFilter 2. the logs from...

@olliezhu you should be able to configure based on which namespace the EnvoyFilter is created in. Per the [docs](https://istio.io/latest/docs/reference/config/networking/envoy-filter/#EnvoyFilter): > workloadSelector : Criteria used to select the specific set of...

@saltbo the EnvoyFilter you referenced is no longer valid for istio version 1.8 and newer after moving to Envoy's V3 API's. You can find an up-to-date example here: [https://github.com/istio/istio/wiki/EnvoyFilter-Samples#tracing-and-access-logging](https://github.com/istio/istio/wiki/EnvoyFilter-Samples#tracing-and-access-logging)

@jacob-delgado was there any particular release where you remember this being an issue? Just looking for a reference PR or we can follow Eric's recommendation based on last security release

@craigbox The graphic was my guess as well. tetrate.io was one of the other sites I checked, and it has a moving graphic on the homepage and the site doesn't...

cc @howardjohn