EnvoyFilter禁用分布式追踪失效问题求助

环境配置 #

• Openshift Version 4.12
• Openshift ServiceMesh Version 2.4.1
• Istio Version 1.16.5
• Envoy Proxy Version 1.24.8

问题现象 #

Pod发起出站请求时，若请求中无W3C(OpenTelemetry)追踪头，Envoy Proxy会自动添加该头，此行为不符合需求，易造成场景混淆。

尝试的解决方案 #

为禁用HttpConnectionManager的追踪功能，参考Envoy官方文档创建了两个EnvoyFilter，但均未生效。

第一个EnvoyFilter配置 #

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: disable-tracing
  namespace: <namespace>
spec:
  configPatches:
  - applyTo: NETWORK_FILTER
    match:
      context: ANY 
      listener:
        filterChain:
          filter:
            name: "envoy.filters.network.http_connection_manager" 
    patch:
      operation: MERGE
      value:
        typed_config:
          "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager"
          tracing:
            global_enabled:
              value: 0
            client_enabled:
              value: 0
            random_sampling:
              value: 0

第二个EnvoyFilter配置 #

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: disable-tracing
  namespace: <namespace>
spec:
  configPatches:
  - applyTo: NETWORK_FILTER
    match:
      context: ANY
      listener:
        filterChain:
          filter:
            name: "envoy.filters.network.http_connection_manager" 
    patch:
      operation: MERGE
      value:
        typed_config:
          "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager"
          tracing:
            client_sampling:
              value: 0
            random_sampling:
              value: 0
            overall_sampling:
              value: 0

排查结果 #

创建任一EnvoyFilter并重启Pod后，查看Envoy配置发现tracing部分仍为空：

"filters": [
    {
      "name": "envoy.filters.network.http_connection_manager",
      "typed_config": {
        "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
        "http_filters": [
          {
            "name": "envoy.filters.http.router",
            "typed_config": {
              "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
            }
          }
        ],
        "route_config": {
          "virtual_hosts": [
            {
              "domains": [
                "*"
              ],
              "name": "backend",
              "routes": [
                {
                  "match": {
                    "prefix": "/healthz/ready"
                  },
                  "route": {
                    "cluster": "agent"
                  }
                }
              ]
            }
          ]
        },
        "stat_prefix": "agent",
        "tracing": {}
      }

可见过滤器已匹配，但tracing配置未生效，请问遗漏了什么配置？恳请提供排查思路或解决方案。

内容的提问来源于stack exchange，提问作者balinteu