hubble-ui icon indicating copy to clipboard operation
hubble-ui copied to clipboard

Is the community version of Hubble and Hubble UI going to be deprecated/Removed?

Open alibo opened this issue 3 years ago • 4 comments

Hi, thank you for your great projects. I'm activity tracking the changes in cilium projects, unlike cilium itself, seems like Hubble and Hubble-UI are not under active maintenance (You can see the commits and MRs in the past 6-9 months)

Are these projects going to be deprecated in favor of their enterprise version? If not, is there any plan to implement some of the most interesting and wanted features from the enterprise version into the community version as well?

  • Support L7 traffic visualization: https://github.com/cilium/hubble-ui/issues/157
  • RBAC
  • Process Context for Syscall Visibility & Enforcement
  • Cilium Service Mesh Integration (I don't have detailed information about this, is jaeger-ui going to be used instead?)

alibo avatar Dec 18 '21 12:12 alibo

Hi Ali,

unlike cilium itself, seems like Hubble and Hubble-UI are not under active maintenance

A quick search in Hubble and Cilium's repositories should quickly confirm that this is NOT true. Hubble and Hubble UI are definitely actively maintained and are not going away. There may have been less new features lately (although this is debatable given e.g. OpenTelemetry support via hubble-otel) but this is only due to priorities changing from cycle to cycle.

Are these projects going to be deprecated in favor of their enterprise version?

No.

Is there any plan to implement some of the most interesting and wanted features from the enterprise version into the community version as well?

RBAC and process context for syscall visibility and enforcement are features of Isovalent's Cilium Enterprise distribution and there are no plans to bring these features to OSS at the moment. We do want to re-enable support for L7 traffic visualization to OSS Hubble UI however, work on this simply hasn't been planned yet. I don't know much about Cilium Service Mesh Integration at this point to answer however.

I hope this helps.

rolinh avatar Dec 20 '21 16:12 rolinh

Thanks, @rolinh for your detailed answer. I'm glad it's not true and it's going to be actively maintained.

I hope we can see more interesting features very soon. It would be very helpful if you can share your roadmap for these projects as well.

RBAC and process context for syscall visibility and enforcement are features of Isovalent's Cilium Enterprise distribution and there are no plans to bring these features to OSS at the moment.

Regarding the RBAC feature, we're planning to implement it for our use-case using envoy ext_authz, but I'm not sure we can share our contributions with the upstream repo as it's an enterprise feature.

alibo avatar Dec 20 '21 19:12 alibo

@alibo for update:

kaworu avatar May 23 '22 07:05 kaworu

Great news! thanks for informing me 🙏

alibo avatar May 23 '22 07:05 alibo