Pods logs at the default log level should make it easier to debug Supervisor ingress, SNI, and TLS certificate problems #1393
Labels
enhancement
New feature or request
estimate/S
Estimated effort/complexity/risk is small
state/accepted
All done!
Is your feature request related to a problem? Please describe.
When the Supervisor's configuration has bad TLS certs, missing TLS certs, bad or missing incoming SNI information on requests, or other problems related to driving https traffic into the Supervisor pods, then the pod logs should contain helpful hints, even when at the default log level.
Describe the solution you'd like
Today, many of the helpful log statements are at the debug or trace level. Add more statements at the default level, or change some of the existing statements to be visible at the debug level. Make sure that at the default level there is not too much logging, and no sharing of sensitive information like request query params, etc.
Using only the default log level, an admin user should be able to tell:
Describe alternatives you've considered
None.
Are you considering submitting a PR for this feature?
This could be documented in https://pinniped.dev/docs/howto/configure-supervisor/, which could have a new troubleshooting section. It could also mention that when using an Ingress, make sure that the Ingress will pass the SNI information through to the Supervisor.
Additional context
None.
The text was updated successfully, but these errors were encountered: