Skip to content

Commit 4af852f

Browse files
Pasha Radchenkotklauser
authored andcommitted
docs: update mtls example
1 parent 10855ee commit 4af852f

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

Documentation/network/servicemesh/mutual-authentication/mutual-authentication-example.rst

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -226,11 +226,11 @@ Start by enabling debug level:
226226
cilium config set debug true
227227
228228
Examine the logs on the Cilium agent located in the same node as the *echo* Pod.
229-
For brevity, you can search for some specific log messages:
229+
For brevity, you can search for some specific log messages by label:
230230

231231
.. code-block:: shell-session
232232
233-
$ kubectl -n kube-system -c cilium-agent logs cilium-9pshw --timestamps=true | grep "Policy is requiring authentication\|Validating Server SNI\|Validated certificate\|Successfully authenticated"
233+
$ kubectl -n kube-system -c cilium-agent logs -l k8s-app=cilium --timestamps=true | grep "Policy is requiring authentication\|Validating Server SNI\|Validated certificate\|Successfully authenticated"
234234
2023-07-04T17:58:28.795760597Z level=debug msg="Policy is requiring authentication" key="localIdentity=17947, remoteIdentity=39239, remoteNodeID=54264, authType=spire" subsys=auth
235235
2023-07-04T17:58:28.800509503Z level=debug msg="Validating Server SNI" SNI ID=39239 subsys=auth
236236
2023-07-04T17:58:28.800525190Z level=debug msg="Validated certificate" subsys=auth uri-san="[spiffe://spiffe.cilium/identity/39239]"
@@ -241,4 +241,4 @@ connects to the node where the destination Pod is running and performs a mutual
241241
the log above showing one side of the mutual TLS handshake).
242242
As the handshake succeeded, the connection was authenticated and the traffic protected by policy could proceed.
243243

244-
Packets between the two Pods can flow until the network policy is removed or the entry expires.
244+
Packets between the two Pods can flow until the network policy is removed or the entry expires.

0 commit comments

Comments
 (0)