Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make Mutual Auth visible #568

Merged
merged 13 commits into from
Jul 24, 2023
Merged

Conversation

meyskens
Copy link
Member

These changes are to make Mutual Auth visible in the UI it does this by doing a few things:

  • Pulling in policy verdict events
  • Add a column in the UI
  • Expose the auth type and encrypted flags in HubbleLinks
  • Add padlocks!

How does it look?

Screenshot from 2023-06-23 11-04-22

Screenshot from 2023-06-23 11-04-29

Why should I NOT "ship it"

Welcome to the self-deprecating part of the code review process where I expose all my insecurities about this piece of code...

Part 1 the table: it currently only exposes auth type on policy verdicts which is not clearly visible, however this is more of an upstream issue IMO?

Part 2.1 the padlock shape: the simplest way (without doing all SVG path calculations in coded) to draw a padlock and maybe soon other icons or extra info was to use an SVG text element with icons font, this does create some loading overhead. Suggestions are welcome (especially in the form of a diff file)

part 2.2 the padlock position: why is it not next to the arrow? Yes true! That was my original intent but the positioning suddenly became way harder as well as the accessing of the relevant data where in the end connector it was available as we already show drops there. Suggestions are welcome (especially in the form of a diff file)

part 3 "ignoring all // TODOs found"": sorry out of scope...

Signed-off-by: Maartje Eyskens <maartje.eyskens@isovalent.com>
Signed-off-by: Maartje Eyskens <maartje.eyskens@isovalent.com>
This data is useful to send for a link to the UI to display info on
if authentication happened as well as if encryption also is the case,

Signed-off-by: Maartje Eyskens <maartje.eyskens@isovalent.com>
Signed-off-by: Maartje Eyskens <maartje.eyskens@isovalent.com>
Signed-off-by: Maartje Eyskens <maartje.eyskens@isovalent.com>
This will now fetch policy verdicts and show them in the table.
By doing that it will also be able to display the authentication type
if one is applied.

Signed-off-by: Maartje Eyskens <maartje.eyskens@isovalent.com>
This adds a green padlock from the icons font to the flow map.
This will be added once an auth type was found in the flows.
It will be colored green if (IPSec) encryptiion events also are found.

Signed-off-by: Maartje Eyskens <maartje.eyskens@isovalent.com>
@meyskens meyskens requested a review from a team as a code owner June 23, 2023 09:23
@meyskens meyskens requested review from geakstr and removed request for a team June 23, 2023 09:23
Signed-off-by: Dima Kharitonov <geakstr@me.com>
@geakstr geakstr merged commit ebd12b6 into cilium:master Jul 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants