From 70e605cc939c4e16ae95dc4d3b9764765358ce3f Mon Sep 17 00:00:00 2001 From: TarasLykhenko <18290033+TarasLykhenko@users.noreply.github.com> Date: Tue, 3 Nov 2026 16:05:03 +0000 Subject: [PATCH 1/3] feat(helm): configure the egress proxy log level Signed-off-by: TarasLykhenko <18290033+TarasLykhenko@users.noreply.github.com> --- charts/substrate/README.md | 1 + charts/substrate/templates/atenet-egress.yaml | 2 +- .../substrate/tests/control_plane_test.yaml | 38 +++++++++++++++++++ charts/substrate/values.yaml | 2 + 4 files changed, 42 insertions(+), 1 deletion(-) diff --git a/charts/substrate/README.md b/charts/substrate/README.md index 7a2e93c655..3b2d1414b7 100644 --- a/charts/substrate/README.md +++ b/charts/substrate/README.md @@ -61,6 +61,7 @@ See `values.yaml` for the full set; the important keys: | `postgres.clientCertificates.enabled` | `false` | Project separate owner and runtime login certificates into the API server | | `.resources` | see `values.yaml` | Requests and limits for each container, e.g. `ateApi.resources` and `atenetRouter.agentgateway.resources` | | `atenetRouter.requestParking.budget` | `5s` | Maximum wait for a suspended actor to become routable, e.g. `30s` for slower cold starts | +| `atenetEgress.agentgateway.logLevel` | `info` | Egress proxy `RUST_LOG` filter, e.g. `debug` or `info,agentgateway=debug` when troubleshooting | | `rustfs.enabled` | `true` | Deploy an in-cluster S3-compatible RustFS bucket for snapshots | | `ateApi.snapshotLocation` | `""` | Cluster-wide snapshot URI; defaults to `gs:///` with bundled RustFS | | `atelet.storageBackend` | `s3` | Default snapshot backend, wired to RustFS when `rustfs.enabled=true` | diff --git a/charts/substrate/templates/atenet-egress.yaml b/charts/substrate/templates/atenet-egress.yaml index 76cb93ad50..d67440000e 100644 --- a/charts/substrate/templates/atenet-egress.yaml +++ b/charts/substrate/templates/atenet-egress.yaml @@ -154,7 +154,7 @@ spec: fieldRef: fieldPath: status.podIP - name: RUST_LOG - value: debug + value: {{ .Values.atenetEgress.agentgateway.logLevel | quote }} ports: - name: https containerPort: 8443 diff --git a/charts/substrate/tests/control_plane_test.yaml b/charts/substrate/tests/control_plane_test.yaml index 126e2b729d..ec4f1323af 100644 --- a/charts/substrate/tests/control_plane_test.yaml +++ b/charts/substrate/tests/control_plane_test.yaml @@ -18,6 +18,7 @@ templates: - ate-api-config.yaml - ate-controller.yaml - atenet-router.yaml +- atenet-egress.yaml - role.yaml - atelet.yaml - k8s-credential-provider.yaml @@ -394,3 +395,40 @@ tests: - matchRegex: path: data["config.yaml"] pattern: 'requestParking:\n\s+budget: "30s"' +- it: defaults the egress proxy log filter to info + template: atenet-egress.yaml + documentSelector: + path: kind + value: Deployment + asserts: + - contains: + path: spec.template.spec.containers[0].env + content: + name: RUST_LOG + value: info +- it: configures the egress proxy log filter + template: atenet-egress.yaml + set: + atenetEgress.agentgateway.logLevel: debug + documentSelector: + path: kind + value: Deployment + asserts: + - contains: + path: spec.template.spec.containers[0].env + content: + name: RUST_LOG + value: debug +- it: preserves module filters in the egress proxy log filter + template: atenet-egress.yaml + set: + atenetEgress.agentgateway.logLevel: "info,agentgateway=debug" + documentSelector: + path: kind + value: Deployment + asserts: + - contains: + path: spec.template.spec.containers[0].env + content: + name: RUST_LOG + value: "info,agentgateway=debug" diff --git a/charts/substrate/values.yaml b/charts/substrate/values.yaml index c4628edde4..77d42fab8f 100644 --- a/charts/substrate/values.yaml +++ b/charts/substrate/values.yaml @@ -159,6 +159,8 @@ atenetRouter: atenetEgress: agentgateway: + # RUST_LOG filter. Use debug or a module filter when troubleshooting. + logLevel: info resources: requests: cpu: 50m From 3f723eb56f618880b33769fbe6b2fa732b704c8a Mon Sep 17 00:00:00 2001 From: TarasLykhenko <18290033+TarasLykhenko@users.noreply.github.com> Date: Tue, 3 Nov 2026 16:11:01 +0000 Subject: [PATCH 2/3] Remove the redundant log filter comment Signed-off-by: TarasLykhenko <18290033+TarasLykhenko@users.noreply.github.com> --- charts/substrate/values.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/charts/substrate/values.yaml b/charts/substrate/values.yaml index 77d42fab8f..75c9836f98 100644 --- a/charts/substrate/values.yaml +++ b/charts/substrate/values.yaml @@ -159,7 +159,6 @@ atenetRouter: atenetEgress: agentgateway: - # RUST_LOG filter. Use debug or a module filter when troubleshooting. logLevel: info resources: requests: From 2c097270f2d8f3998e1946ad439cc702fea73289 Mon Sep 17 00:00:00 2001 From: TarasLykhenko <18290033+TarasLykhenko@users.noreply.github.com> Date: Wed, 4 Nov 2026 13:08:31 +0000 Subject: [PATCH 3/3] Enable debug egress logs for Helm networking tests Signed-off-by: TarasLykhenko <18290033+TarasLykhenko@users.noreply.github.com> --- .github/workflows/helm-e2e.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/helm-e2e.yaml b/.github/workflows/helm-e2e.yaml index 272d6d9b60..0af79dd9d5 100644 --- a/.github/workflows/helm-e2e.yaml +++ b/.github/workflows/helm-e2e.yaml @@ -91,6 +91,7 @@ jobs: - name: Provision PostgreSQL and connection Secrets run: hack/install-postgres.sh --kind - name: Install Agent Substrate with Helm + # Networking tests assert the debug-level CONNECT tunnel log. run: | helm upgrade --install substrate charts/substrate \ --namespace ate-system \ @@ -101,6 +102,7 @@ jobs: --set image.tag=helm-e2e \ --set 'preview[0]=ALL' \ --set 'atenetRouter.ingressAllowedSPIFFEIDs[0]=spiffe://cluster.local/ns/ate-e2e-router-client/sa/router-client' \ + --set atenetEgress.agentgateway.logLevel=debug \ --set 'atelet.extraArgs[0]=--localhost-registry-replacement=kind-registry:5000' \ --set 'atelet.extraArgs[1]=--snapshot-upload-delay=2s' \ --set 'atelet.extraArgs[2]=--snapshot-detach-delay=30s' \