-
Notifications
You must be signed in to change notification settings - Fork 283
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Mute tracing for subprocesses executed in by the tracer #6584
Conversation
The tracer sometimes runs external processes in some cases. Currently, `hostname` and `getenforce`. The subprocess instrumentation creates spans for these, leading to visible `command_execution` spans for `hostname` and/or `enforce` which may be confusing to users. This commit uses the bew blackhole span API (#6326) to mute tracing during when `hostname` and `getenforce` are run, preventing the creation of these spans.
BenchmarksStartupParameters
See matching parameters
SummaryFound 2 performance improvements and 0 performance regressions! Performance is the same for 44 metrics, 8 unstable metrics.
LoadParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 10 metrics, 16 unstable metrics. Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.29.0-SNAPSHOT~d438c2e326, baseline=1.29.0-SNAPSHOT~281e492170
dateFormat X
axisFormat %s
section baseline
no_agent (356.504 µs) : 337, 376
. : milestone, 357,
iast (478.925 µs) : 457, 500
. : milestone, 479,
iast_FULL (525.893 µs) : 505, 546
. : milestone, 526,
iast_GLOBAL (486.501 µs) : 466, 507
. : milestone, 487,
iast_HARDCODED_SECRET_DISABLED (462.414 µs) : 442, 483
. : milestone, 462,
iast_INACTIVE (438.504 µs) : 418, 459
. : milestone, 439,
iast_TELEMETRY_OFF (464.667 µs) : 444, 485
. : milestone, 465,
tracing (437.14 µs) : 416, 458
. : milestone, 437,
section candidate
no_agent (366.077 µs) : 345, 387
. : milestone, 366,
iast (472.438 µs) : 451, 493
. : milestone, 472,
iast_FULL (526.449 µs) : 506, 547
. : milestone, 526,
iast_GLOBAL (490.89 µs) : 470, 511
. : milestone, 491,
iast_HARDCODED_SECRET_DISABLED (464.475 µs) : 444, 485
. : milestone, 464,
iast_INACTIVE (443.183 µs) : 422, 464
. : milestone, 443,
iast_TELEMETRY_OFF (463.559 µs) : 443, 484
. : milestone, 464,
tracing (429.815 µs) : 410, 450
. : milestone, 430,
Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.29.0-SNAPSHOT~d438c2e326, baseline=1.29.0-SNAPSHOT~281e492170
dateFormat X
axisFormat %s
section baseline
no_agent (1.353 ms) : 1334, 1373
. : milestone, 1353,
appsec (1.737 ms) : 1712, 1763
. : milestone, 1737,
iast (1.519 ms) : 1495, 1544
. : milestone, 1519,
profiling (1.509 ms) : 1484, 1534
. : milestone, 1509,
tracing (1.522 ms) : 1497, 1548
. : milestone, 1522,
section candidate
no_agent (1.339 ms) : 1321, 1358
. : milestone, 1339,
appsec (1.773 ms) : 1748, 1798
. : milestone, 1773,
iast (1.497 ms) : 1473, 1522
. : milestone, 1497,
profiling (1.487 ms) : 1462, 1512
. : milestone, 1487,
tracing (1.484 ms) : 1459, 1509
. : milestone, 1484,
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looking good for the profiler part
What Does This Do
The tracer sometimes runs external processes. Currently,
hostname
andgetenforce
. The subprocess instrumentation creates spans for these, leading to visiblecommand_execution
spans forhostname
and/orenforce
which may be confusing to users.This commit uses the new blackhole span API (#6326) to mute tracing during when
hostname
andgetenforce
are run, preventing the creation of these spans.Also reverts #6478, which would be redundant with the current cases.
Motivation
Additional Notes
Jira ticket: [PROJ-IDENT]