Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[collector] Use NetworkPolicy for communication between Jaeger and database pods. #3455

Open
Ankit152 opened this issue Nov 13, 2024 · 3 comments
Labels
enhancement New feature or request needs triage

Comments

@Ankit152
Copy link
Contributor

Ankit152 commented Nov 13, 2024

Component(s)

collector

Is your feature request related to a problem? Please describe.

With the in-memory storage solution for Jaeger being in place (extension service and ingress), it's also crucial to add support for storing traces in the databases supported by Jaeger binary in a Kubernetes cluster.
The challenge here is to ensure effective and reliable communication between Jaeger and database, where traces will be stored and will be fetched whenever required.

Describe the solution you'd like

In a case where communication is crucial between two pods, NetworkPolicy will turn out to be fruitful.
User or Cluster Admin can create a database deployment on their own and that configuration can be used in the OpenTelemetery Operator spec to create a Jaeger instance. This will also give users flexibility of maintaining and managing the database by creating multiple replicas ruling out single-point-of-failure.
The idea is to add support in OpenTelemetry operator for creating NetworkPolicy when the user performs kubectl apply, automating the entire flow.

Describe alternatives you've considered

No response

Additional context

The whole idea is presented over here.
Jaeger V2: jaegertracing/jaeger-operator#2717

@Ankit152 Ankit152 added enhancement New feature or request needs triage labels Nov 13, 2024
@Ankit152 Ankit152 changed the title Use NetworkPolicy for communication between Jaeger and database pods. [collector] Use NetworkPolicy for communication between Jaeger and database pods. Nov 13, 2024
@Ankit152
Copy link
Contributor Author

The implementation details can be discussed in the public so that we all can agree on things.
cc @yurishkuro @pavolloffay @iblancasa @jkowall

@iblancasa iblancasa added the discuss-at-sig This issue or PR should be discussed at the next SIG meeting label Nov 14, 2024
@pavolloffay
Copy link
Member

I don't see a justification for using a network policy. The backed can be reached by a normal k8s service.

Users could optionaly configure network policy to enforce security, however this can be done outside of the operator.

@Ankit152
Copy link
Contributor Author

Alright, that makes sense. Since we need a service to establish connection, are we expecting that as a part of the operator or it would be outside the operator?

@jaronoff97 jaronoff97 removed the discuss-at-sig This issue or PR should be discussed at the next SIG meeting label Dec 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request needs triage
Projects
None yet
Development

No branches or pull requests

4 participants