Skip to content

Stream Hubble UI responses without proxy disk buffering #5534

Closed

Description

@devantler

🤖 Generated by the Agentic Engineer

Description

The Hubble UI reverse proxy buffers its long-lived API responses and can spill them to temporary files. This adds unnecessary disk work and can delay updates reaching the UI. The fix must address streaming behavior while preserving visibility of real failures.

Reproduction

The pinned Cilium 1.20.3 chart's Hubble UI proxy template forwards the API with HTTP/1.1 but leaves response buffering at its default. Runtime observations are retained privately. The configuration establishes the suspected cause; a controlled slow-stream regression is still required before claiming an executed reproduction.

Expected Behavior

API response chunks reach the client promptly without temporary-file buffering. Ordinary frontend assets, health checks, request headers and error responses continue to behave correctly.

Acceptance Criteria

  • Reproduce delayed or buffered delivery with the actual pinned frontend runtime and controlled upstream responses.
  • Make the narrowest declarative correction, retaining the upstream configuration's routing and health behavior. Change no log severity, alert rule or security permission.
  • Test the actual rendered chart configuration, including a negative control using the original buffering behavior; retain proper error/status propagation and request handling.
  • Limit rollout to the UI and validate both supported overlays and existing production authorization checks.
  • Complete substantive review and protected deployment, then verify prompt updates and the absence of new buffering warnings over a fresh observation window.

Part of #2043

Activity

  1. self-assigned this
    on Oct 28, 2026
  2. added theissue type on Oct 28, 2026
  3. moved this to 🏃🏻‍♂️ In Progress in 🌊 Project Boardon Oct 28, 2026
  4. added a commit that references this issue on Oct 28, 2026
  5. devantler commented on Oct 29, 2026

    @devantler
    ContributorAuthor

    🤖 Generated by the Agentic Engineer

    Accepted after protected merge #5535 (87fe958ee835c886d64707cff28a73a1d43696f0). The deployed UI contains the reviewed streaming directive and matching rollout checksum; both containers are ready with zero restarts.

    The real browser view now renders live flows, and timestamps advanced continuously between separate observations without reloading. A fresh 20-minute frontend log read contains 263 API requests, all successful, with no warnings, errors or temporary-file buffering warnings. The prior native Linux regression at reviewed head 3a04d1887d836c26ec1a29547fd5e9aec68ae242 exercised the original buffering control and correction while preserving complete responses, requests, health and upstream errors; both supported rendered overlays passed.

    This closes the streaming defect. Broader observability and platform security work remains tracked separately; no log levels, alert rules or security permissions were changed for this fix.

  6. moved this from 🏃🏻‍♂️ In Progress to ✅ Done in 🌊 Project Boardon Oct 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

Fields

Priority

None yet

Effort

None yet

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions