hubble-ui icon indicating copy to clipboard operation
hubble-ui copied to clipboard

feat/policy-names: Add network policy names when they are known.

Open kgtw opened this issue 1 year ago • 9 comments

Introduces new Egress allowed by policies and Ingress allowed by policies info blocks within the the respective flows detailed sidebar information.

Policy names are only shown when they have successfully been correlated to a flow by cilium-agent. In a handful of known scenarios where cilium is allowing traffic internally (like allowing localhost access) we try to map the policy to a human friendly name with the value taken from the reserved:io.cilium.policy.derived-from label.

Fixes: https://github.com/cilium/hubble/issues/1100

Example screenshot demonstrating a custom ingress policy, as well as showing the cilium internal policy which is prefixed with <cilium-internal>/.

Screenshot 2023-11-27 at 00 31 13

kgtw avatar Nov 26 '23 13:11 kgtw