2
39%
master: 39%

Ran 04 May 2022 04:27PM UTC

Files 937

Run time 5min

Badge

Embed ▾

Committed 04 May 2022 03:16PM UTC coverage: 33.884% (-0.01%) from 33.896%

Job # 41360.2

Build Type

push

travis-ci-com

Committed by

aanm

Commit Message

hubble/relay: Make Peer Service a K8s Service

Currently Hubble-Relay builds its client list by querying
the Peer Service over the local Hubble Unix domain socket.
This goes against best security practices (sharing files
across pods) and is not allowed on platforms that strictly
enforce SELinux policies (e.g. OpenShift).

This PR enables, by default, the creation of a Kubernetes Service
that proxies the Hubble Peer Service so that Hubble-Relay
can use it to build its client list, eliminating the need
for a shared Unix domain socket completely.

Helm values and configurations have been added to enable
the service in a cilium deployment.

Signed-off-by: Nate Sweet <nathanjsweet@pm.me>

Run Details

47392 of 139867 relevant lines covered (33.88%)

1823.23 hits per line

cilium / cilium / 41360 / 2
39%
master: 39%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 41360.2

cilium / cilium / 41360 / 2 39% master: 39%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 41360.2

cilium / cilium / 41360 / 2
39%
master: 39%

README BADGES
x