feat(kumacp): mesh access log - proto + validation

deployments/charts/kuma/crds/kuma.io_meshaccesslogs.yaml

@@ -0,0 +1,274 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.9.2
+  creationTimestamp: null
+  name: meshaccesslogs.kuma.io
+spec:
+  group: kuma.io
+  names:
+    categories:
+    - kuma
+    kind: MeshAccessLog
+    listKind: MeshAccessLogList
+    plural: meshaccesslogs
+    singular: meshaccesslog
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: Spec is the specification of the Kuma MeshAccessLog resource.
+            properties:
+              from:
+                description: From is a list of pairs – a group of clients and action
+                  applied for it
+                items:
+                  properties:
+                    default:
+                      description: Default is a configuration specific to the group
+                        of clients referenced in 'targetRef'
+                      properties:
+                        backends:
+                          items:
+                            properties:
+                              file:
+                                description: FileBackend defines configuration for
+                                  file based access logs
+                                properties:
+                                  format:
+                                    description: Format of access logs. Placeholders
+                                      available on https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log
+                                    properties:
+                                      json:
+                                        items:
+                                          properties:
+                                            key:
+                                              type: string
+                                            value:
+                                              type: string
+                                          type: object
+                                        type: array
+                                      plain:
+                                        type: string
+                                    type: object
+                                  path:
+                                    description: Path to a file that logs will be
+                                      written to
+                                    type: string
+                                type: object
+                              reference:
+                                properties:
+                                  kind:
+                                    type: string
+                                  name:
+                                    type: string
+                                type: object
+                              tcp:
+                                description: Backend defines logging backend.
+                                properties:
+                                  address:
+                                    description: Type of the backend (Kuma ships with
+                                      'tcp' and 'file')
+                                    type: string
+                                  format:
+                                    description: Format of access logs. Placeholders
+                                      available on https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log
+                                    properties:
+                                      json:
+                                        items:
+                                          properties:
+                                            key:
+                                              type: string
+                                            value:
+                                              type: string
+                                          type: object
+                                        type: array
+                                      plain:
+                                        type: string
+                                    type: object
+                                type: object
+                            type: object
+                          type: array
+                      type: object
+                    targetRef:
+                      description: TargetRef is a reference to the resource that represents
+                        a group of clients.
+                      properties:
+                        kind:
+                          description: Kind of the referenced resource
+                          enum:
+                          - Mesh
+                          - MeshSubset
+                          - MeshService
+                          - MeshServiceSubset
+                          - MeshGatewayRoute
+                          - MeshHTTPRoute
+                          type: string
+                        mesh:
+                          description: Mesh is used with MeshService and MeshServiceSubset
+                            to identify the service from another mesh. Could be useful
+                            when implementing policies with cross-mesh support.
+                          type: string
+                        name:
+                          description: Name of the referenced resource
+                          type: string
+                        tags:
+                          additionalProperties:
+                            type: string
+                          description: Tags are used with MeshSubset and MeshServiceSubset
+                            to define a subset of proxies
+                          type: object
+                      type: object
+                  type: object
+                type: array
+              targetRef:
+                description: TargetRef is a reference to the resource the policy takes
+                  an effect on. The resource could be either a real store object or
+                  virtual resource defined inplace.
+                properties:
+                  kind:
+                    description: Kind of the referenced resource
+                    enum:
+                    - Mesh
+                    - MeshSubset
+                    - MeshService
+                    - MeshServiceSubset
+                    - MeshGatewayRoute
+                    - MeshHTTPRoute
+                    type: string
+                  mesh:
+                    description: Mesh is used with MeshService and MeshServiceSubset
+                      to identify the service from another mesh. Could be useful when
+                      implementing policies with cross-mesh support.
+                    type: string
+                  name:
+                    description: Name of the referenced resource
+                    type: string
+                  tags:
+                    additionalProperties:
+                      type: string
+                    description: Tags are used with MeshSubset and MeshServiceSubset
+                      to define a subset of proxies
+                    type: object
+                type: object
+              to:
+                items:
+                  properties:
+                    default:
+                      description: Default is a configuration specific to the group
+                        of clients referenced in 'targetRef'
+                      properties:
+                        backends:
+                          items:
+                            properties:
+                              file:
+                                description: FileBackend defines configuration for
+                                  file based access logs
+                                properties:
+                                  format:
+                                    description: Format of access logs. Placeholders
+                                      available on https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log
+                                    properties:
+                                      json:
+                                        items:
+                                          properties:
+                                            key:
+                                              type: string
+                                            value:
+                                              type: string
+                                          type: object
+                                        type: array
+                                      plain:
+                                        type: string
+                                    type: object
+                                  path:
+                                    description: Path to a file that logs will be
+                                      written to
+                                    type: string
+                                type: object
+                              reference:
+                                properties:
+                                  kind:
+                                    type: string
+                                  name:
+                                    type: string
+                                type: object
+                              tcp:
+                                description: Backend defines logging backend.
+                                properties:
+                                  address:
+                                    description: Type of the backend (Kuma ships with
+                                      'tcp' and 'file')
+                                    type: string
+                                  format:
+                                    description: Format of access logs. Placeholders
+                                      available on https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log
+                                    properties:
+                                      json:
+                                        items:
+                                          properties:
+                                            key:
+                                              type: string
+                                            value:
+                                              type: string
+                                          type: object
+                                        type: array
+                                      plain:
+                                        type: string
+                                    type: object
+                                type: object
+                            type: object
+                          type: array
+                      type: object
+                    targetRef:
+                      description: TargetRef is a reference to the resource that represents
+                        a group of clients.
+                      properties:
+                        kind:
+                          description: Kind of the referenced resource
+                          enum:
+                          - Mesh
+                          - MeshSubset
+                          - MeshService
+                          - MeshServiceSubset
+                          - MeshGatewayRoute
+                          - MeshHTTPRoute
+                          type: string
+                        mesh:
+                          description: Mesh is used with MeshService and MeshServiceSubset
+                            to identify the service from another mesh. Could be useful
+                            when implementing policies with cross-mesh support.
+                          type: string
+                        name:
+                          description: Name of the referenced resource
+                          type: string
+                        tags:
+                          additionalProperties:
+                            type: string
+                          description: Tags are used with MeshSubset and MeshServiceSubset
+                            to define a subset of proxies
+                          type: object
+                      type: object
+                  type: object
+                type: array
+            type: object
+        type: object
+    served: true
+    storage: true

deployments/charts/kuma/values.yaml

@@ -690,4 +690,5 @@ experimental:
 # @ignored for helm-docs
 plugins:
   policies:
+    - meshaccesslogs
     - meshtrafficpermissions

docs/generated/cmd/kumactl/kumactl_get.md

@@ -38,6 +38,8 @@ Show Kuma resources.
 * [kumactl get healthcheck](kumactl_get_healthcheck.md)	 - Show a single HealthCheck resource
 * [kumactl get healthchecks](kumactl_get_healthchecks.md)	 - Show HealthCheck
 * [kumactl get mesh](kumactl_get_mesh.md)	 - Show a single Mesh resource
+* [kumactl get meshaccesslog](kumactl_get_meshaccesslog.md)	 - Show a single MeshAccessLog resource
+* [kumactl get meshaccesslogs](kumactl_get_meshaccesslogs.md)	 - Show MeshAccessLog
 * [kumactl get meshes](kumactl_get_meshes.md)	 - Show Mesh
 * [kumactl get meshgateway](kumactl_get_meshgateway.md)	 - Show a single MeshGateway resource
 * [kumactl get meshgatewayroute](kumactl_get_meshgatewayroute.md)	 - Show a single MeshGatewayRoute resource

docs/generated/cmd/kumactl/kumactl_get_meshaccesslog.md

@@ -0,0 +1,33 @@
+## kumactl get meshaccesslog
+
+Show a single MeshAccessLog resource
+
+### Synopsis
+
+Show a single MeshAccessLog resource.
+
+```
+kumactl get meshaccesslog NAME [flags]
+```
+
+### Options
+
+```
+  -h, --help          help for meshaccesslog
+  -m, --mesh string   mesh to use (default "default")
+```
+
+### Options inherited from parent commands
+
+```
+      --api-timeout duration   the timeout for api calls. It includes connection time, any redirects, and reading the response body. A timeout of zero means no timeout (default 1m0s)
+      --config-file string     path to the configuration file to use
+      --log-level string       log level: one of off|info|debug (default "off")
+      --no-config              if set no config file and config directory will be created
+  -o, --output string          output format: one of table|yaml|json (default "table")
+```
+
+### SEE ALSO
+
+* [kumactl get](kumactl_get.md)	 - Show Kuma resources
+

docs/generated/cmd/kumactl/kumactl_get_meshaccesslogs.md

@@ -0,0 +1,35 @@
+## kumactl get meshaccesslogs
+
+Show MeshAccessLog
+
+### Synopsis
+
+Show MeshAccessLog entities.
+
+```
+kumactl get meshaccesslogs [flags]
+```
+
+### Options
+
+```
+  -h, --help            help for meshaccesslogs
+  -m, --mesh string     mesh to use (default "default")
+      --offset string   the offset that indicates starting element of the resources list to retrieve
+      --size int        maximum number of elements to return
+```
+
+### Options inherited from parent commands
+
+```
+      --api-timeout duration   the timeout for api calls. It includes connection time, any redirects, and reading the response body. A timeout of zero means no timeout (default 1m0s)
+      --config-file string     path to the configuration file to use
+      --log-level string       log level: one of off|info|debug (default "off")
+      --no-config              if set no config file and config directory will be created
+  -o, --output string          output format: one of table|yaml|json (default "table")
+```
+
+### SEE ALSO
+
+* [kumactl get](kumactl_get.md)	 - Show Kuma resources
+

docs/generated/cmd/kumactl/kumactl_inspect.md

@@ -30,6 +30,7 @@ Inspect Kuma resources.
 * [kumactl inspect dataplanes](kumactl_inspect_dataplanes.md)	 - Inspect Dataplanes
 * [kumactl inspect fault-injection](kumactl_inspect_fault-injection.md)	 - Inspect FaultInjection
 * [kumactl inspect healthcheck](kumactl_inspect_healthcheck.md)	 - Inspect HealthCheck
+* [kumactl inspect meshaccesslog](kumactl_inspect_meshaccesslog.md)	 - Inspect MeshAccessLog
 * [kumactl inspect meshes](kumactl_inspect_meshes.md)	 - Inspect Meshes
 * [kumactl inspect meshgateway](kumactl_inspect_meshgateway.md)	 - Inspect MeshGateway
 * [kumactl inspect meshtrafficpermission](kumactl_inspect_meshtrafficpermission.md)	 - Inspect MeshTrafficPermission