search

kumahq / kuma-gui

🐻 A GUI built on Vue.js for use with Kuma.
https://kuma.io/
Apache License 2.0
39 stars 22 forks source link

Consider showing Mesh config in inbound/outbound drawers #2975

Open johncowen opened 2 months ago

johncowen commented 2 months ago

Description

The drawers for inbounds/outbounds are supposed to show you the entire "picture" of the policies/config for a dataplane.

We currently use the inspect _rules API to show us the merged result of policy configs, but occasionally this doesn't show the entire picture. For example, MeshTLS can take the mode from the config for the Mesh for its default, but this is not currently shown in the resulting config for a MeshTLS policy.

Moreover if an inbound/outbound has no policies associated with it at all, there are still things take from the Mesh config that influence the traffic.

Therefore we should consider:

  1. Showing the Mesh config at the bottom of the drawer underneath all of the rules. That way the user can also see any defaults that are being used for the Mesh (we might want to remove the type and name from the display of this config seeing as thats already clear)
  2. Separately, there is a decision to be made on whether the inspect API _rules endpoint should show the full result of a policy which can be influenced by the configuration for the Mesh, such as in the case of MeshTLS where mode might take 'PERMISSIVE' from the Mesh config. If this change happens, we will need to be able to include this in the GUI somehow under Origins (currently Origin Policies so you can understand where this configuration comes from.
jakubdyszkiewicz commented 2 months ago

Might depend on https://github.com/kumahq/kuma/issues/11493