Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

hubble: Add reserved-identity metric context #20474

Merged
merged 1 commit into from
Jul 21, 2022

Conversation

michi-covalent
Copy link
Contributor

Allow Hubble metrics to use reserved labels as contexts. There are some
cases where the identity context is too noisy for reserved entities.

  1. kube-apiserver

    Depending on where the Kubernetes API server is running, the identity
    context shows up as something like this:

    cidr:1.2.3.4/32,reserved:kube-apiserver,reserved:world
    

    The reserved-identity context returns reserved:kube-apiserver in this
    case.

  2. CIDR identities

    For CIDR identities, the identity context shows up as something like:

    cidr:1.2.3.4/32,reserved:world
    

    The reserved-identity context returns reserved:world in this case.

Signed-off-by: Michi Mutsuzaki michi@isovalent.com

hubble: Add reserved-identity metric context

@michi-covalent michi-covalent requested a review from a team July 11, 2022 20:13
@michi-covalent michi-covalent requested a review from a team as a code owner July 11, 2022 20:13
@maintainer-s-little-helper maintainer-s-little-helper bot added the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Jul 11, 2022
@michi-covalent michi-covalent added the release-note/minor This PR changes functionality that users may find relevant to operating Cilium. label Jul 11, 2022
@maintainer-s-little-helper maintainer-s-little-helper bot removed the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Jul 11, 2022
@michi-covalent michi-covalent force-pushed the pr/michi/reserved-identity-context branch 2 times, most recently from 4b7c469 to 91f7252 Compare July 11, 2022 21:36
Allow Hubble metrics to use reserved labels as contexts. There are some
cases where the identity context is too noisy for reserved entities.

1. kube-apiserver

   Depending on where the Kubernetes API server is running, the identity
   context shows up as something like this:

       cidr:1.2.3.4/32,reserved:kube-apiserver,reserved:world

   The reserved-identity context returns reserved:kube-apiserver in this
   case.

2. CIDR identities

   For CIDR identities, the identity context shows up as something like:

       cidr:1.2.3.4/32,reserved:world

   The reserved-identity context returns reserved:world in this case.

Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>
@michi-covalent michi-covalent force-pushed the pr/michi/reserved-identity-context branch from 91f7252 to 2c6d9c6 Compare July 11, 2022 23:41
@michi-covalent
Copy link
Contributor Author

/test

Copy link
Member

@gandro gandro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Neat, thanks!

Copy link
Member

@qmonnet qmonnet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good to me, this looks.

@michi-covalent
Copy link
Contributor Author

ignoring gke failure. marking as ready to merge

@michi-covalent michi-covalent added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Jul 20, 2022
@gandro gandro merged commit 28eb923 into master Jul 21, 2022
@gandro gandro deleted the pr/michi/reserved-identity-context branch July 21, 2022 08:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ready-to-merge This PR has passed all tests and received consensus from code owners to merge. release-note/minor This PR changes functionality that users may find relevant to operating Cilium.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants