Envoy Admin Interface
These settings can be used to enable the Envoy admin interface. The Envoy admin interface can be useful when debugging issues with Pomerium itself.
Access to the admin interface must be carefully controlled.
Envoy Admin Address
Envoy Admin Address configures the listener address for the Envoy admin interface. If this setting is unset or empty, the Envoy admin interface will not be enabled.
How to configure
- Core
- Enterprise
- Kubernetes
| Config file keys | Environment variables | Type |
|---|---|---|
envoy_admin_address | ENVOY_ADMIN_ADDRESS | string |
Example
envoy_admin_address: '127.0.0.1:29091'
Envoy Admin Address is not configurable in the Enterprise Console.
Envoy Admin Address is not configurable by the Pomerium Ingress Controller.
Envoy Admin Access Log Path
Envoy Admin Access Log Path enables access logging for requests to the Envoy admin interface.
How to configure
- Core
- Enterprise
- Kubernetes
| Config file keys | Environment variables | Type | Default |
|---|---|---|---|
envoy_admin_access_log_path | ENVOY_ADMIN_ACCESS_LOG_PATH | string | os.DevNull (access logging disabled) |
Example
envoy_admin_access_log_path: /var/log/pomerium/envoy-admin-access.log
Envoy Admin Access Log Path is not configurable in the Enterprise Console.
Envoy Admin Access Log Path is not configurable by the Pomerium Ingress Controller.
Envoy Admin Profile Path
Envoy Admin Profile Path is the output path for CPU profiles taken via the Envoy admin interface.
How to configure
- Core
- Enterprise
- Kubernetes
| Config file keys | Environment variables | Type | Default |
|---|---|---|---|
envoy_admin_profile_path | ENVOY_ADMIN_PROFILE_PATH | string | os.DevNull (profiling disabled) |
Example
envoy_admin_profile_path: /var/log/pomerium/envoy.prof
Envoy Admin Profile Path is not configurable in the Enterprise Console.
Envoy Admin Profile Path is not configurable by the Pomerium Ingress Controller.