diff options
| author | Christian Heimes <cheimes@redhat.com> | 2015-11-06 13:04:58 +0100 |
|---|---|---|
| committer | Simo Sorce <simo@redhat.com> | 2015-11-11 11:37:15 -0500 |
| commit | 38fa5ecd780a6b00b70a450c4716320865ef4227 (patch) | |
| tree | 3b752a06d8b7b9f277c30383df9b99836d8bc53e /custodia/kubernetes/node.py | |
| parent | d3c907cb21416a23e8f736f156ea807f6d1d00c5 (diff) | |
| download | custodia-kube.tar.gz custodia-kube.tar.xz custodia-kube.zip | |
Increase logging output of Kubernetes pluginskube
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Diffstat (limited to 'custodia/kubernetes/node.py')
| -rw-r--r-- | custodia/kubernetes/node.py | 19 |
1 files changed, 12 insertions, 7 deletions
diff --git a/custodia/kubernetes/node.py b/custodia/kubernetes/node.py index 5d4f863..99f5d1b 100644 --- a/custodia/kubernetes/node.py +++ b/custodia/kubernetes/node.py @@ -38,7 +38,7 @@ class NodeAuth(HTTPAuthenticator): return None dockerid = self._pid2dockerid(int(creds['pid'])) if dockerid is None: - self.logger.debug("Didn't find docker ID for pid %s", creds['pid']) + self.logger.debug("Didn't find Docker ID for pid %s", creds['pid']) return None try: @@ -50,24 +50,29 @@ class NodeAuth(HTTPAuthenticator): self.logger.debug("Failed to query docker for [%s:%s]: %s", creds['pid'], dockerid, err) self.audit_svc_access(log.AUDIT_SVC_AUTH_FAIL, - request['client_id'], dockerid) + request['client_id'], dockerid) return False if data_id != dockerid: - self.logger.debug("Docker ID %s not found!", dockerid) + self.logger.debug("Docker ID %s not found for pid %s!", + dockerid, creds['pid']) self.audit_svc_access(log.AUDIT_SVC_AUTH_FAIL, - request['client_id'], dockerid) + request['client_id'], dockerid) return False podname = data_labels.get('io.kubernetes.pod.name') if podname is None: - self.logger.debug("Pod Name not found for Docker ID %s", dockerid) + self.logger.debug("Pod Name not found for Docker ID %s, pid %s", + dockerid, creds['pid']) self.audit_svc_access(log.AUDIT_SVC_AUTH_FAIL, - request['client_id'], dockerid) + request['client_id'], dockerid) return False + self.logger.debug("PID %s runs in Docker container %s of pod '%s'", + creds['pid'], dockerid, podname) + self.audit_svc_access(log.AUDIT_SVC_AUTH_PASS, - request['client_id'], dockerid) + request['client_id'], dockerid) request['client_id'] = dockerid request['remote_user'] = podname return True |