Enable HTTP log to capture the requestbody and headers in the log

[buddhinh]

I'm trying to enable headers and request body in linkerd-proxy HTTP log.

By default, LINKERD2_PROXY_LOG environmental variable in workload application linkerd-proxy container set as following, disabling headers and request body.

LINKERD2_PROXY_LOG: warn,linkerd=info,hickory=error,[{headers}]=off,[{request}]=off

I have tried to enable that by changing linkerd-config configmap.

Default parametes of linkerd-config configmap:

logHTTPHeaders: "off"
logLevel: warn,linkerd=info,hickory=error

Applied configmap parameters

logHTTPHeaders: "on"
logLevel: warn,linkerd=info,hickory=error

However, I have failed to loh headers and request body.

Is it possible to capture the requestbody and headers? What is the correct way to do that?

[adleong]

the logHTTPHeaders value must be set to insecure to log headers in plaintext. See:

linkerd2/charts/linkerd-control-plane/values.yaml

Line 163 in d1b2aa5

# -- (`off` or `insecure`) If set to `off`, will prevent the proxy from

[buddhinh]

Thanks for the update. Request header can be captured by setting “logHTTPHeaders” to “insecure“ and log level to debug in the linkerd-config configmap.
Is there any possibility to enable logging request headers in the deployment level of the workload? (without enabling globally)

[alpeb]

Yes, you can set the annotation config.linkerd.io/proxy-log-http-headers: insecure in the pod template metadata of the workload.