Figure: Gloo UI dashboard

About the Gloo UI

The Gloo UI is automatically installed in the Gloo management cluster. Let’s explore some of the key features that you have access to when using the Gloo UI:

  • Gloo Network overview: With the Gloo UI, you can view information about your Gloo Network environment, such as the number of clusters that are registered with the Gloo management server and the Cilium version that is deployed to them. You can also review the health of Gloo Network components, such as the Gloo management server and agents by using the Gloo UI log viewer to view and search logs.
  • Insights: Gloo Network for Cilium comes with an insights engine that automatically analyzes your Cilium setup for health issues. Then, Gloo shares these issues along with recommendations to harden your Cilium setup. The insights give you a checklist to address issues that might otherwise be hard to detect across your environment. For more information, see Insights.
  • Resource overview: With the Gloo UI, you can view all Cilium and Kubernetes resources in one place for all the clusters that you registered with the management server.
  • Drill into apps and services: Review what services can communicate with other services, the policies that are applied before traffic is sent to a service, and how traffic between services is secured.
  • Visualize and monitor metrics: With the built-in Prometheus integration, the Gloo UI visualizes some metrics in the Gloo UI graph. For more information about the Prometheus integration, see Prometheus.

For a detailed overview of what information you can find in the Gloo UI, see Explore the Gloo UI.

Default access to the Gloo UI

By default, the Gloo UI is deployed in the gloo-mesh namespace of your management cluster. The deployment is exposed with a ClusterIP service so that no one can access it from outside the cluster. You can review the gloo-mesh-ui resources with the following command.

  kubectl get all -A -l app=gloo-mesh-ui
  

To control access:

  1. Give only administrators access to the management cluster.
  2. Control user access to the Gloo UI service in the management cluster with Kubernetes RBAC.
  3. Optionally set up an OIDC provider for the Gloo UI.

External authentication for the Gloo UI

To further protect the Gloo UI from unauthorized users, set up authentication and authorization (AuthN/AuthZ) for the Gloo UI by using OpenID Connect (OIDC) and Kubernetes role-based access control (RBAC). The Gloo UI supports OpenID Connect (OIDC) authentication from common providers such as Google, Okta, and Auth0. For more information, see Set up external auth.

Monitored metrics in the Gloo UI

The Gloo UI monitors and visualizes the some metrics from the built-in Prometheus server for the workloads in your cluster. You can see and work with these metrics by using the Gloo UI Graph.

To learn more about the built-in Prometheus server and the metrics that are available to you, see the Prometheus overview.