-
Notifications
You must be signed in to change notification settings - Fork 3.4k
Remove deprecated annotations-based L7 visibility #35019
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
/test |
cb24ec4
to
c6611cf
Compare
/ci-ginkgo |
c6611cf
to
3fb4b85
Compare
/ci-ginkgo |
3fb4b85
to
cc7205a
Compare
/ci-ginkgo |
/ci-integration |
/test |
/ci-integration Hit #34092: https://github.com/cilium/cilium/actions/runs/11012829080/job/30579864094 |
cc7205a
to
4f31e62
Compare
/test |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@tklauser Nice clean up!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice cleanup!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good. Would like to have @jrajahalme's review before merging.
There's a minor docs change needed, otherwise this is good.
L7 visibility using Pod annotations is deprecated and the feature will be removed in a successive commit. Switch K8sAgentHubbleTest still using it to use L7 visibility policy instead. Signed-off-by: Tobias Klauser <tobias@cilium.io>
Previously it was possible to enable L7 protocol visibility using the policy.cilium.io/proxy-visibility annotation. That method has various known bugs, is no longer supported and has been deprecated since Cilium 1.15, see #28449. Signed-off-by: Tobias Klauser <tobias@cilium.io>
…alue The error return value is always nil, remove it. Signed-off-by: Tobias Klauser <tobias@cilium.io>
4f31e62
to
5d88f2c
Compare
/test |
@jrajahalme @learnitall could you please take a look? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looking great, thanks for the clean-up!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could we backport at least the test changes up to v1.15 branch?
Sure, will open separate backports for these. |
Previously it was possible to enable L7 protocol visibility using the
policy.cilium.io/proxy-visibility
Pod annotation. That method has various bugs, is no longer supported and has been deprecated since Cilium 1.15, see #28449.See commits for details.