[EKS] [aws-network-policy-agent]: please provide a tool to visualize traffic and network policy enforcement
- Dominant language
- Shell
- Stars
- 5.4k
- Forks
- 334
- PR merge metrics
- No merged PRs in 30d
Description
**Tell us about your request**
As a long time user and fan of Cilium (CNI and netpol engine), Hubble is invaluable. A hard blocker for me to consider adopting the aws-network-policy-agent is the lack of an analogous visualization tool.
**Which service(s) is this request for?**
EKS, I guess. But really it's the network policy agent (and VPC CNI plugin).
**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
Visualize traffic and network policy enforcement when using the AWS VPC CNI plugin and network policy agent. Bonus points for an interactive policy editor. Basically, I want Hubble to work with y'all's netpol engine.
**Are you currently working around this issue?**
Use Isovalent's Hubble, either with Cilium as CNI and netpol engine or with the AWS VPC CNI and chaining Cilium as the netpol engine.
**Additional context**
I'd like a boolean in the Helm chart that enables a web UI with Ingress etc such that I can easily provide https://aws-netpol-viz.my-cluster.local to my users.
**Attachments**
Perhaps Isovalent would be interested in collaborating on supporting the aws-network-policy-agent in Hubble.
Contributor guide
Research direction
The issue names no files, tests, or entry points. Start by clarifying whether the work belongs in the AWS VPC CNI/network policy agent, Hubble integration, or a Helm-deployed web UI. Done should be an agreed scope for traffic and policy visualization, including whether interactive editing and Ingress are included.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, helm, kubernetes
- Domain
- cloud, networking, observability-sre
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100