-
Notifications
You must be signed in to change notification settings - Fork 2.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Correlate flows with CiliumNetworkPolicies #27854
Conversation
/test |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm for the files owned by hubble team, just some minor suggestions / questions.
i'll add do-not-merge label. i'd like to get this reviewed by @gandro 🙏
bac754b
to
0aee000
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Overall looks good to me, thanks! One note regarding the L7 parser invocation
0aee000
to
f060504
Compare
/test |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Neat, thanks!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A couple of nits, but otherwise this looks good.
f060504
to
438e764
Compare
Using GetRealizedPolicyRuleLabelsForKey, lookup policy labels for a flow using the: direction, endpointIP, remoteIdentity, protocool and destination port. After getting the labels, reconstruct the policy name and namespace using the well-known policy labels. Signed-off-by: Chance Zibolski <chance.zibolski@gmail.com>
438e764
to
cd9b4d4
Compare
/test |
Using GetRealizedPolicyRuleLabelsForKey, lookup policy labels for a flow using the: direction, endpointIP, remoteIdentity, protocool and destination port. After getting the labels, reconstruct the policy name and namespace using the well-known policy labels.
Relates to cilium/hubble#1100
Closes #26438.
Reviewers note: The protobuf field numbers may look arbitrary, however, this is a port of a feature we maintained internally, so for compatibility, it would be ideal to reuse the existing protobuf field names and numbers.