debug

Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>

Author: jrajahalme

cilium/filter_state_cilium_policy.cc

@@ -106,7 +106,16 @@ bool CiliumPolicyFilterState::enforcePodHTTPPolicy(const Network::Connection& co
                      conn, pod_ip_, ingress_ ? "ingress" : "egress", verdict ? "ALLOW" : "DENY",
                      proxy_id_, remote_id, port);
       return verdict;
+    } else {
+      ENVOY_CONN_LOG(debug,
+                     "cilium.l7policy: Pod {} HTTP {} policy cache MISS "
+                     "(version: {}/{}, id: {}/{}, port: {}/{}), not skipping.",
+                     conn, pod_ip_, ingress_ ? "ingress" : "egress", version, policy_cache.version_,
+                     remote_id, policy_cache.identity_, port, policy_cache.port_);
     }
+  } else {
+    ENVOY_CONN_LOG(debug, "cilium.l7policy: Pod {} HTTP {} policy has HTTP rules, not skipping.",
+                   conn, pod_ip_, ingress_ ? "ingress" : "egress");
   }
 
   bool verdict = port_policy.allowed(proxy_id_, remote_id, headers, log_entry);

cilium/l7policy.cc

@@ -81,6 +81,7 @@ Config::Config(const std::string& access_log_path, const std::string& denied_403
   if (len < 2 || denied_403_body_[len - 2] != '\r' || denied_403_body_[len - 1] != '\n') {
     denied_403_body_.append("\r\n");
   }
+  ENVOY_LOG(debug, "cilium.l7policy: Config created");
 }
 
 Config::Config(const ::cilium::L7Policy& config, TimeSource& time_source, Stats::Scope& scope,