Added logs to rbac (#4853)
Added logs to rbac
diff --git a/internal/xds/rbac/rbac_engine.go b/internal/xds/rbac/rbac_engine.go
index b3d372e..a25f9cf 100644
--- a/internal/xds/rbac/rbac_engine.go
+++ b/internal/xds/rbac/rbac_engine.go
@@ -39,6 +39,8 @@
"google.golang.org/grpc/status"
)
+const logLevel = 2
+
var logger = grpclog.Component("rbac")
var getConnection = transport.GetConnection
@@ -77,6 +79,9 @@
}
for _, engine := range cre.chainedEngines {
matchingPolicyName, ok := engine.findMatchingPolicy(rpcData)
+ if logger.V(logLevel) && ok {
+ logger.Infof("incoming RPC matched to policy %v in engine with action %v", matchingPolicyName, engine.action)
+ }
switch {
case engine.action == v3rbacpb.RBAC_ALLOW && !ok:
