You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Stream Hubble UI responses without proxy disk buffering #5534
The Hubble UI reverse proxy buffers its long-lived API responses and can spill them to temporary files. This adds unnecessary disk work and can delay updates reaching the UI. The fix must address streaming behavior while preserving visibility of real failures.
Reproduction
The pinned Cilium 1.20.3 chart's Hubble UI proxy template forwards the API with HTTP/1.1 but leaves response buffering at its default. Runtime observations are retained privately. The configuration establishes the suspected cause; a controlled slow-stream regression is still required before claiming an executed reproduction.
Expected Behavior
API response chunks reach the client promptly without temporary-file buffering. Ordinary frontend assets, health checks, request headers and error responses continue to behave correctly.
Acceptance Criteria
Reproduce delayed or buffered delivery with the actual pinned frontend runtime and controlled upstream responses.
Make the narrowest declarative correction, retaining the upstream configuration's routing and health behavior. Change no log severity, alert rule or security permission.
Test the actual rendered chart configuration, including a negative control using the original buffering behavior; retain proper error/status propagation and request handling.
Limit rollout to the UI and validate both supported overlays and existing production authorization checks.
Complete substantive review and protected deployment, then verify prompt updates and the absence of new buffering warnings over a fresh observation window.
Accepted after protected merge #5535 (87fe958ee835c886d64707cff28a73a1d43696f0). The deployed UI contains the reviewed streaming directive and matching rollout checksum; both containers are ready with zero restarts.
The real browser view now renders live flows, and timestamps advanced continuously between separate observations without reloading. A fresh 20-minute frontend log read contains 263 API requests, all successful, with no warnings, errors or temporary-file buffering warnings. The prior native Linux regression at reviewed head 3a04d1887d836c26ec1a29547fd5e9aec68ae242 exercised the original buffering control and correction while preserving complete responses, requests, health and upstream errors; both supported rendered overlays passed.
This closes the streaming defect. Broader observability and platform security work remains tracked separately; no log levels, alert rules or security permissions were changed for this fix.
Activity
chore: agent-claim #5534 nonce=e0b281dd087fcd7cb85fa35f9e18c405
devantler commentedon Oct 29, 2026
Accepted after protected merge #5535 (
87fe958ee835c886d64707cff28a73a1d43696f0). The deployed UI contains the reviewed streaming directive and matching rollout checksum; both containers are ready with zero restarts.The real browser view now renders live flows, and timestamps advanced continuously between separate observations without reloading. A fresh 20-minute frontend log read contains 263 API requests, all successful, with no warnings, errors or temporary-file buffering warnings. The prior native Linux regression at reviewed head
3a04d1887d836c26ec1a29547fd5e9aec68ae242exercised the original buffering control and correction while preserving complete responses, requests, health and upstream errors; both supported rendered overlays passed.This closes the streaming defect. Broader observability and platform security work remains tracked separately; no log levels, alert rules or security permissions were changed for this fix.