-
Notifications
You must be signed in to change notification settings - Fork 2.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
hubble: Hubble node_name field should contain cluster name #15933
Conversation
Hi, I have edited the configMap of cilium with following cluster information as below:
to:
Then restarted the cilium pods and hubble pods, its been observed that local node is unavailable. Am I missing something and do we have any doc to follow to setup single cluster.
$ hubble observe -o compact --last 2 --print-node-name
I can see the cilium node list and its showing properly
Kindly throw some light :) |
48e5d07
to
e8c15bb
Compare
Any update on reviewing this PR? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Apologies for the delayed review. Thanks a lot for the PR, this is overall the right approach.
There are some failing unit tests that need to be fixed in github.com/cilium/cilium/pkg/hubble/monitor
:
https://travis-ci.com/github/cilium/cilium/jobs/502667881#L14680
Description: This field node_name currently only contains the node name, without it's cluster-mesh prefix. If the cluster name is not the default cluster name then it should show the node_name along with prefixed cluster name. Its should be shown as below: cluster<id>/<node_name> Eg: cluster1/node-ip.compute.internal $ hubble observe --last 2 -o compact --print-node-name Nov 3 11:40:45.407 [cluster5/ip-172-0-51-175.us-west-2.compute.internal]: [...] Nov 3 11:40:46.554 [cluster7/ip-172-0-121-242.us-west-2.compute.internal ]: [...] Tested Output: vagrant@k8s1:~/go/src/github.com/cilium/cilium$ hubble observe --print-node-name TIMESTAMP NODE SOURCE DESTINATION TYPE VERDICT SUMMARY May 3 15:47:10.176 maha/k8s1 10.11.1.226:51792 10.11.0.190:4240 to-stack FORWARDED TCP Flags: SYN May 3 15:47:10.177 maha/k8s1 10.11.1.226:51792 10.11.0.190:4240 from-host FORWARDED TCP Flags: SYN May 3 15:47:10.177 maha/k8s1 10.11.1.226:51792 10.11.0.190:4240 to-stack FORWARDED TCP Flags: SYN $ hubble observe --last 2 -o compact --print-node-name May 3 15:50:18.290 [maha/k8s1]: [fd00::1:8665]:52188 -> [fd00::ebfa]:4240 to-endpoint FORWARDED (TCP Flags: ACK) May 3 15:50:22.638 [maha/k8s1]: fe80::436:9bff:fedc:1763 -> ff02::2 from-endpoint FORWARDED (ICMPv6 RouterSolicitation) Fixes: cilium#13872 Signed-off-by: Maddy007-maha <mahadev.panchal@accuknox.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Awesome, thanks again!
test-me-please |
As for the issue regarding clustermesh, I don't think minikube is the right way to test it, as it doesn't really have node connectivity. I recommend using kind instead and following the guide: https://docs.cilium.io/en/latest/gettingstarted/clustermesh/clustermesh/#gs-clustermesh |
test-1.21-4.9 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@Maddy007-maha No need to re-request a review, this just needs to pass CI at this point (which it has) and requires a review from a janitor as well. Then it will be merged.
Edit: I'm also re-running the conformance tests. This slightly changes the behavior of Hubble's output in clustermesh, thus we want to make sure it doesn't break the new cilium-cli based CI
Description:
This field node_name currently only contains the node name, without its cluster-mesh prefix.
If the cluster name is not the default cluster name then it should show the node_name along with the prefixed cluster name
Its should be shown as below:
cluster/<node_name>
Eg: cluster1/node-ip.compute.internal
$ hubble observe --last 2 -o compact --print-node-name
Nov 3 11:40:45.407 [cluster5/ip-172-0-51-175.us-west-2.compute.internal]: [...]
Nov 3 11:40:46.554 [cluster7/ip-172-0-121-242.us-west-2.compute.internal ]: [...]
Fixes: #13872
Signed-off-by: Maddy007-maha mahadev.panchal@accuknox.com