hubble-ui
hubble-ui copied to clipboard
feat/policy-names: Add network policy names when they are known.
Introduces new Egress allowed by policies
and Ingress allowed by policies
info blocks within the the respective flows detailed sidebar information.
Policy names are only shown when they have successfully been correlated to a flow by cilium-agent. In a handful of known scenarios where cilium is allowing traffic internally (like allowing localhost access) we try to map the policy to a human friendly name with the value taken from the reserved:io.cilium.policy.derived-from
label.
Fixes: https://github.com/cilium/hubble/issues/1100
Example screenshot demonstrating a custom ingress policy, as well as showing the cilium internal policy which is prefixed with <cilium-internal>/
.