# Configuration for logentry instances apiVersion: "config.istio.io/v1alpha2" kind: instance metadata: name: rbacsamplelog namespace: istio-system spec: compiledTemplate: logentry params: severity: '"warning"' timestamp: request.time variables: source: source.labels["app"] | source.workload.name | "unknown" user: source.user | "unknown" destination: destination.labels["app"] | destination.workload.name | "unknown" responseCode: response.code | 0 responseSize: response.size | 0 latency: response.duration | "0ms" permissiveResponseCode: rbac.permissive.response_code | "" permissiveResponsePolicyID: rbac.permissive.effective_policy_id | "" monitored_resource_type: '"UNSPECIFIED"' --- # Configuration for a stdio handler apiVersion: "config.istio.io/v1alpha2" kind: handler metadata: name: rbacsamplehandler namespace: istio-system spec: compiledAdapter: stdio params: severity_levels: warning: 1 # Params.Level.WARNING outputAsJson: true --- # Rule to send logentry instances to a stdio handler apiVersion: "config.istio.io/v1alpha2" kind: rule metadata: name: rabcsamplestdio namespace: istio-system spec: actions: - handler: rbacsamplehandler instances: [ rbacsamplelog ] ---