From b9e0dc2a8d975f3dcd4606bddf08486cc2a3fa30 Mon Sep 17 00:00:00 2001 From: hc-github-team-consul-core Date: Tue, 20 Jun 2023 16:02:56 -0400 Subject: [PATCH] Backport of Add jwt-authn metrics to jwt-provider docs into release/1.16.x (#17824) * backport of commit 452d08d5e8e40c0710a2042dd1d67b8eaa5fe43d * backport of commit 1f1f222c97f981a23de44be2afdef37c25f4a91a --------- Co-authored-by: Ronald Ekambi --- .../connect/config-entries/jwt-provider.mdx | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/website/content/docs/connect/config-entries/jwt-provider.mdx b/website/content/docs/connect/config-entries/jwt-provider.mdx index b31427af4f..f003106a33 100644 --- a/website/content/docs/connect/config-entries/jwt-provider.mdx +++ b/website/content/docs/connect/config-entries/jwt-provider.mdx @@ -952,6 +952,22 @@ Defines behavior for caching the validation result of previously encountered JWT +## Metrics + +The following `envoy` metrics can be used to track jwt authentication details. + +~> **Note:** Envoy does not currently provide any documentation on these metrics. + +```yaml +http.public_listener.jwt_authn.allowed +http.public_listener.jwt_authn.cors_preflight_bypassed +http.public_listener.jwt_authn.denied +http.public_listener.jwt_authn.jwks_fetch_failed +http.public_listener.jwt_authn.jwks_fetch_success +http.public_listener.jwt_authn.jwt_cache_hit +http.public_listener.jwt_authn.jwt_cache_miss +``` + ## Examples The following examples demonstrate common JWT provider configuration patterns for specific use cases. @@ -1023,4 +1039,4 @@ spec: ``` - \ No newline at end of file +