[v1.13] hubble-relay: deprecate peer svc through local unix domain socket #23442
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
kaworu
added
kind/cleanup
maintainer-s-little-helper
bot
added
the
backport/1.13
rolinh
approved these changes
Jan 30, 2023
kaworu
force-pushed
the
pr/kaworu/1.13/relay/deprecate-peer-svc-through-local-unix-domain-socket
branch
from
1355370
to
50ed811
Compare
michi-covalent
approved these changes
Jan 31, 2023
aanm
approved these changes
Jan 31, 2023
aanm
added
the
ready-to-merge
Hubble server has been integrated into the Cilium agent since v1.9, released Nov 10th 2020. Some doc fixes and improvements on the way. Signed-off-by: Alexandre Perrin <alex@isovalent.com>
Since Cilium v1.12 Hubble Relay has been connecting to the Hubble Peer service through the hubble-peer Kubernetes Service (i.e. TCP) by default. The ability to query the Peer Service through the local UNIX domain socket for Relay has been kept for compatibility reasons and as a fallback solution, but we should move away from sharing socket through Pods as it has potential security implications. This patch deprecate disabling the hubble-peer Kubernetes Service as it will be the only option once the local UNIX domain support for the Peer Service in Hubble Relay is removed. Signed-off-by: Alexandre Perrin <alex@isovalent.com>
kaworu
force-pushed
the
pr/kaworu/1.13/relay/deprecate-peer-svc-through-local-unix-domain-socket
branch
from
50ed811
to
7be3b2d
Compare
kaworu
added
the
release-blocker/1.13
qmonnet
approved these changes
Jan 31, 2023
kaworu
deleted the
pr/kaworu/1.13/relay/deprecate-peer-svc-through-local-unix-domain-socket
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
v1.13 backport PR of #23407