feat(helm): configure the egress proxy log level

.github/workflows/helm-e2e.yaml

@@ -91,6 +91,7 @@ jobs:
     - name: Provision PostgreSQL and connection Secrets
       run: hack/install-postgres.sh --kind
     - name: Install Agent Substrate with Helm
+      # Networking tests assert the debug-level CONNECT tunnel log.
       run: |
         helm upgrade --install substrate charts/substrate \
           --namespace ate-system \
@@ -101,6 +102,7 @@ jobs:
           --set image.tag=helm-e2e \
           --set 'preview[0]=ALL' \
           --set 'atenetRouter.ingressAllowedSPIFFEIDs[0]=spiffe://cluster.local/ns/ate-e2e-router-client/sa/router-client' \
+          --set atenetEgress.agentgateway.logLevel=debug \
           --set 'atelet.extraArgs[0]=--localhost-registry-replacement=kind-registry:5000' \
           --set 'atelet.extraArgs[1]=--snapshot-upload-delay=2s' \
           --set 'atelet.extraArgs[2]=--snapshot-detach-delay=30s' \

charts/substrate/README.md

@@ -61,6 +61,7 @@ See `values.yaml` for the full set; the important keys:
 | `postgres.clientCertificates.enabled` | `false` | Project separate owner and runtime login certificates into the API server |
 | `<component>.resources` | see `values.yaml` | Requests and limits for each container, e.g. `ateApi.resources` and `atenetRouter.agentgateway.resources` |
 | `atenetRouter.requestParking.budget` | `5s` | Maximum wait for a suspended actor to become routable, e.g. `30s` for slower cold starts |
+| `atenetEgress.agentgateway.logLevel` | `info` | Egress proxy `RUST_LOG` filter, e.g. `debug` or `info,agentgateway=debug` when troubleshooting |
 | `rustfs.enabled` | `true` | Deploy an in-cluster S3-compatible RustFS bucket for snapshots |
 | `ateApi.snapshotLocation` | `""` | Cluster-wide snapshot URI; defaults to `gs://<rustfs.bucket>/` with bundled RustFS |
 | `atelet.storageBackend` | `s3` | Default snapshot backend, wired to RustFS when `rustfs.enabled=true` |

charts/substrate/templates/atenet-egress.yaml

@@ -154,7 +154,7 @@ spec:
             fieldRef:
               fieldPath: status.podIP
         - name: RUST_LOG
-          value: debug
+          value: {{ .Values.atenetEgress.agentgateway.logLevel | quote }}
         ports:
         - name: https
           containerPort: 8443

charts/substrate/tests/control_plane_test.yaml

@@ -18,6 +18,7 @@ templates:
 - ate-api-config.yaml
 - ate-controller.yaml
 - atenet-router.yaml
+- atenet-egress.yaml
 - role.yaml
 - atelet.yaml
 - k8s-credential-provider.yaml
@@ -394,3 +395,40 @@ tests:
   - matchRegex:
       path: data["config.yaml"]
       pattern: 'requestParking:\n\s+budget: "30s"'
+- it: defaults the egress proxy log filter to info
+  template: atenet-egress.yaml
+  documentSelector:
+    path: kind
+    value: Deployment
+  asserts:
+  - contains:
+      path: spec.template.spec.containers[0].env
+      content:
+        name: RUST_LOG
+        value: info
+- it: configures the egress proxy log filter
+  template: atenet-egress.yaml
+  set:
+    atenetEgress.agentgateway.logLevel: debug
+  documentSelector:
+    path: kind
+    value: Deployment
+  asserts:
+  - contains:
+      path: spec.template.spec.containers[0].env
+      content:
+        name: RUST_LOG
+        value: debug
+- it: preserves module filters in the egress proxy log filter
+  template: atenet-egress.yaml
+  set:
+    atenetEgress.agentgateway.logLevel: "info,agentgateway=debug"
+  documentSelector:
+    path: kind
+    value: Deployment
+  asserts:
+  - contains:
+      path: spec.template.spec.containers[0].env
+      content:
+        name: RUST_LOG
+        value: "info,agentgateway=debug"

charts/substrate/values.yaml

@@ -159,6 +159,7 @@ atenetRouter:
 
 atenetEgress:
   agentgateway:
+    logLevel: info
     resources:
       requests:
         cpu: 50m