access log: add JSON logging mode

.circleci/config.yml

@@ -1,16 +1,16 @@
-references:
-  envoy-build-image: &envoy-build-image
-    envoyproxy/envoy-build:faea2a2ebc397b7a3a5e3c877ceaefc5cf4daf25
+version: 2.1
+
+executors:
+  ubuntu-build:
+    description: "A regular build executor based on ubuntu image"
+    docker:
+      - image: envoyproxy/envoy-build:faea2a2ebc397b7a3a5e3c877ceaefc5cf4daf25
+    resource_class: xlarge
+    working_directory: /source
 
-version: 2
 jobs:
    release:
-     docker:
-       - image: *envoy-build-image
-     resource_class: xlarge
-     working_directory: /source
-     environment:
-       BAZEL_REMOTE_CACHE: https://storage.googleapis.com/envoy-circleci-bazel-cache/
+     executor: ubuntu-build
      steps:
        - run: rm -rf /home/circleci/project/.git # CircleCI git caching is likely broken
        - checkout
@@ -19,12 +19,7 @@ jobs:
        - run: ci/docker_push.sh
        - run: ci/docker_tag.sh
    asan:
-     docker:
-       - image: *envoy-build-image
-     resource_class: xlarge
-     working_directory: /source
-     environment:
-       BAZEL_REMOTE_CACHE: https://storage.googleapis.com/envoy-circleci-bazel-cache/
+     executor: ubuntu-build
      steps:
        - run: rm -rf /home/circleci/project/.git # CircleCI git caching is likely broken
        - run: echo $CIRCLE_SHA1
@@ -33,21 +28,13 @@ jobs:
        - checkout
        - run: ci/do_circle_ci.sh bazel.asan
    tsan:
-     docker:
-       - image: *envoy-build-image
-     resource_class: xlarge
-     working_directory: /source
-     environment:
-       BAZEL_REMOTE_CACHE: https://storage.googleapis.com/envoy-circleci-bazel-cache/
+     executor: ubuntu-build
      steps:
        - run: rm -rf /home/circleci/project/.git # CircleCI git caching is likely broken
        - checkout
        - run: ci/do_circle_ci.sh bazel.tsan
    api:
-     docker:
-       - image: *envoy-build-image
-     resource_class: xlarge
-     working_directory: /source
+     executor: ubuntu-build
      steps:
        - run: rm -rf /home/circleci/project/.git # CircleCI git caching is likely broken
        - checkout
@@ -57,10 +44,7 @@ jobs:
              - "fb:f3:fe:be:1c:b2:ec:b6:25:f9:7b:a6:87:54:02:8c"
        - run: ci/api_mirror.sh
    filter_example_mirror:
-     docker:
-       - image: *envoy-build-image
-     resource_class: xlarge
-     working_directory: /source
+     executor: ubuntu-build
      steps:
        - run: rm -rf /home/circleci/project/.git # CircleCI git caching is likely broken
        - checkout
@@ -70,15 +54,13 @@ jobs:
        - run: ci/filter_example_mirror.sh
    ipv6_tests:
      machine: true
-     environment:
-       BAZEL_REMOTE_CACHE: https://storage.googleapis.com/envoy-circleci-bazel-cache/
      steps:
      - run: rm -rf /home/circleci/project/.git # CircleCI git caching is likely broken
      - checkout
      - run:
          name: enable ipv6
          command: |
-           cat <<'EOF' | sudo tee /etc/docker/daemon.json
+           cat \<<'EOF' | sudo tee /etc/docker/daemon.json
            {
              "ipv6": true,
              "fixed-cidr-v6": "2001:db8:1::/64"
@@ -94,10 +76,7 @@ jobs:
      - run: ./ci/do_circle_ci_ipv6_tests.sh
 
    coverage:
-     docker:
-       - image: *envoy-build-image
-     resource_class: xlarge
-     working_directory: /source
+     executor: ubuntu-build
      steps:
        - run: rm -rf /home/circleci/project/.git # CircleCI git caching is likely broken
        - checkout
@@ -106,10 +85,8 @@ jobs:
        - store_artifacts:
            path: /build/envoy/generated/coverage
    format:
-     docker:
-       - image: *envoy-build-image
+     executor: ubuntu-build
      resource_class: small
-     working_directory: /source
      steps:
        - run: rm -rf /home/circleci/project/.git # CircleCI git caching is likely broken
        - checkout
@@ -128,10 +105,7 @@ jobs:
        - setup_remote_docker
        - run: ci/build_container/docker_push.sh
    docs:
-     docker:
-       - image: *envoy-build-image
-     resource_class: xlarge
-     working_directory: /source
+     executor: ubuntu-build
      steps:
        - run: rm -rf /home/circleci/project/.git # CircleCI git caching is likely broken
        - checkout
@@ -145,8 +119,6 @@ jobs:
    mac:
      macos:
        xcode: "9.3.0"
-     environment:
-       BAZEL_REMOTE_CACHE: https://storage.googleapis.com/envoy-circleci-bazel-cache/
      steps:
        - run: sudo ntpdate -vu time.apple.com
        - run: rm -rf /home/circleci/project/.git # CircleCI git caching is likely broken

.gitignore

@@ -6,6 +6,7 @@ BROWSE
 /ci/bazel-*
 /ci/prebuilt/thirdparty
 /ci/prebuilt/thirdparty_build
+compile_commands.json
 cscope.*
 .deps
 /docs/landing_source/.bundle

CODEOWNERS

@@ -1,4 +1,4 @@
-# TODO(zuercher): determine how we want to deal deal with auto-assignment
+# TODO(zuercher): determine how we want to deal with auto-assignment
 # By default, @envoyproxy/maintainers own everything.
 #*       @envoyproxy/maintainers
 

DEPRECATED.md

@@ -6,7 +6,9 @@ As of release 1.3.0, Envoy will follow a
 The following features have been DEPRECATED and will be removed in the specified release cycle.
 A logged warning is expected for each deprecated item that is in deprecation window.
 
-## Version 1.8.0 (pending)
+## Version 1.9.0 (pending)
+
+## Version 1.8.0 (Oct 4, 2018)
 
 * Use of the v1 API (including `*.deprecated_v1` fields in the v2 API) is deprecated.
   See envoy-announce [email](https://groups.google.com/forum/#!topic/envoy-announce/oPnYMZw8H4U).
@@ -29,10 +31,13 @@ A logged warning is expected for each deprecated item that is in deprecation win
 * Setting hosts via `hosts` field in `Cluster` is deprecated. Use `load_assignment` instead.
 * Use of `response_headers_to_*` and `request_headers_to_add` are deprecated at the `RouteAction`
   level. Please use the configuration options at the `Route` level.
+* Use of `runtime` in `RouteMatch`, found in
+  [route.proto](https://github.com/envoyproxy/envoy/blob/master/api/envoy/api/v2/route/route.proto).
+  Set the `runtime_fraction` field instead.
 * Use of the string `user` field in `Authenticated` in [rbac.proto](https://github.com/envoyproxy/envoy/blob/master/api/envoy/config/rbac/v2alpha/rbac.proto)
   is deprecated in favor of the new `StringMatcher` based `principal_name` field.
 
-## Version 1.7.0
+## Version 1.7.0 (Jun 21, 2018)
 
 * Admin mutations should be sent as POSTs rather than GETs. HTTP GETs will result in an error
   status code and will not have their intended effect. Prior to 1.7, GETs can be used for

VERSION

@@ -1 +1 @@
-1.8.0-dev
+1.9.0-dev

WORKSPACE

@@ -1,6 +1,6 @@
 workspace(name = "envoy")
 
-load("//bazel:repositories.bzl", "envoy_dependencies")
+load("//bazel:repositories.bzl", "envoy_dependencies", "GO_VERSION")
 load("//bazel:cc_configure.bzl", "cc_configure")
 
 envoy_dependencies()
@@ -11,4 +11,4 @@ api_dependencies()
 
 load("@io_bazel_rules_go//go:def.bzl", "go_rules_dependencies", "go_register_toolchains")
 go_rules_dependencies()
-go_register_toolchains()
+go_register_toolchains(go_version = GO_VERSION)

api/docs/BUILD

@@ -12,8 +12,10 @@ package_group(
 proto_library(
     name = "protos",
     deps = [
+        "//envoy/admin/v2alpha:certs",
         "//envoy/admin/v2alpha:clusters",
         "//envoy/admin/v2alpha:config_dump",
+        "//envoy/admin/v2alpha:memory",
         "//envoy/api/v2:cds",
         "//envoy/api/v2:discovery",
         "//envoy/api/v2:eds",
@@ -36,6 +38,7 @@ proto_library(
         "//envoy/config/filter/http/header_to_metadata/v2:header_to_metadata",
         "//envoy/config/filter/http/health_check/v2:health_check",
         "//envoy/config/filter/http/ip_tagging/v2:ip_tagging",
+        "//envoy/config/filter/http/jwt_authn/v2alpha:jwt_authn",
         "//envoy/config/filter/http/lua/v2:lua",
         "//envoy/config/filter/http/rate_limit/v2:rate_limit",
         "//envoy/config/filter/http/rbac/v2:rbac",

api/envoy/admin/v2alpha/BUILD

@@ -37,3 +37,9 @@ api_proto_library_internal(
     srcs = ["memory.proto"],
     visibility = ["//visibility:public"],
 )
+
+api_proto_library_internal(
+    name = "certs",
+    srcs = ["certs.proto"],
+    visibility = ["//visibility:public"],
+)

api/envoy/admin/v2alpha/certs.proto

@@ -0,0 +1,45 @@
+syntax = "proto3";
+
+package envoy.admin.v2alpha;
+
+// [#protodoc-title: Certificates]
+
+// Proto representation of certificate details. Admin endpoint uses this wrapper for `/certs` to
+// display certificate information. See :ref:`/certs <operations_admin_interface_certs>` for more
+// information.
+message Certificates {
+  // List of certificates known to an Envoy.
+  repeated Certificate certificates = 1;
+}
+
+message Certificate {
+
+  // Details of CA certificate.
+  repeated CertificateDetails ca_cert = 1;
+
+  // Details of Certificate Chain
+  repeated CertificateDetails cert_chain = 2;
+}
+
+message CertificateDetails {
+  // Path of the certificate.
+  string path = 1;
+
+  // Certificate Serial Number.
+  string serial_number = 2;
+
+  // List of Subject Alternate names.
+  repeated SubjectAlternateName subject_alt_names = 3;
+
+  // Minimum of days until expiration of certificate and it's chain.
+  uint64 days_until_expiration = 4;
+}
+
+message SubjectAlternateName {
+
+  // Subject Alternate Name.
+  oneof name {
+    string dns = 1;
+    string uri = 2;
+  }
+}

api/envoy/api/v2/core/BUILD

@@ -37,11 +37,15 @@ api_proto_library_internal(
     visibility = [
         ":friends",
     ],
+    deps = [
+        "//envoy/type:percent",
+    ],
 )
 
 api_go_proto_library(
     name = "base",
     proto = ":base",
+    deps = ["//envoy/type:percent_go_proto"],
 )
 
 api_proto_library_internal(

api/envoy/api/v2/core/base.proto

@@ -9,6 +9,8 @@ import "google/protobuf/wrappers.proto";
 import "validate/validate.proto";
 import "gogoproto/gogo.proto";
 
+import "envoy/type/percent.proto";
+
 option (gogoproto.equal_all) = true;
 
 // [#protodoc-title: Common types]
@@ -216,3 +218,13 @@ message SocketOption {
   SocketState state = 6
       [(validate.rules).message.required = true, (validate.rules).enum.defined_only = true];
 }
+
+// Runtime derived FractionalPercent with defaults for when the numerator or denominator is not
+// specified via a runtime key.
+message RuntimeFractionalPercent {
+  // Default value if the runtime value's for the numerator/denominator keys are not available.
+  envoy.type.FractionalPercent default_value = 1 [(validate.rules).message.required = true];
+
+  // Runtime key for a YAML representation of a FractionalPercent.
+  string runtime_key = 2;
+}