Skip to content

Instantly share code, notes, and snippets.

@bikram20

bikram20/gist:b0dfe8f2d8777ab4f92f69de1bb8e3d9 Secret

Created April 1, 2020 08:33
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bikram20/b0dfe8f2d8777ab4f92f69de1bb8e3d9 to your computer and use it in GitHub Desktop.
Save bikram20/b0dfe8f2d8777ab4f92f69de1bb8e3d9 to your computer and use it in GitHub Desktop.
Download ZIP
Typha vs. Calico API calls
Raw
gistfile1.txt
ubuntu@ip-10-0-0-10:/etc/ssl/certs$ wc -l /var/log/calico/audit/*.log
107277 /var/log/calico/audit/kube-audit-2020-03-29T08-57-32.700.log
106653 /var/log/calico/audit/kube-audit-2020-03-29T16-53-48.413.log
104603 /var/log/calico/audit/kube-audit-2020-03-30T00-29-47.085.log
107721 /var/log/calico/audit/kube-audit-2020-03-30T08-34-25.677.log
107872 /var/log/calico/audit/kube-audit-2020-03-30T16-41-21.889.log
107897 /var/log/calico/audit/kube-audit-2020-03-31T00-47-09.971.log
107595 /var/log/calico/audit/kube-audit-2020-03-31T08-51-49.553.log
107078 /var/log/calico/audit/kube-audit-2020-03-31T16-54-55.237.log
106973 /var/log/calico/audit/kube-audit-2020-04-01T00-58-26.450.log
99853 /var/log/calico/audit/kube-audit.log
1063522 total
ubuntu@ip-10-0-0-10:/etc/ssl/certs$
ubuntu@ip-10-0-0-10:/etc/ssl/certs$ jq '. | select(.user.username=="system:serviceaccount:calico-system:calico-node")' /var/log/calico/audit/*.log | jq -r '[.objectRef.resource,.verb,.level][-3:] | @csv' | sort | uniq -c | sort -b -n
30 "globalfelixconfigs","get","RequestResponse"
30 "nodes","patch","RequestResponse"
30 "nodes","update","RequestResponse"
30 "tiers","create","RequestResponse"
140 "bgpconfigurations","get","RequestResponse"
222 "ipamhandles","delete","RequestResponse"
222 "ipamhandles","update","RequestResponse"
226 "pods","patch","RequestResponse"
232 "blockaffinities","get","RequestResponse"
232 "blockaffinities","list","RequestResponse"
232 "ipamconfigs","get","RequestResponse"
232 "ipamhandles","create","RequestResponse"
232 "namespaces","get","RequestResponse"
286 "felixconfigurations","get","RequestResponse"
396 "services","get","RequestResponse"
454 "ipamblocks","get","RequestResponse"
454 "ipamblocks","update","RequestResponse"
672 "clusterinformations","get","RequestResponse"
716 "pods","get","RequestResponse"
852 "nodes","get","RequestResponse"
1008 "ippools","list","RequestResponse"
1192 "ipamhandles","get","RequestResponse"
72698 "licensekeys","get","RequestResponse"
ubuntu@ip-10-0-0-10:/etc/ssl/certs$
ubuntu@ip-10-0-0-10:/etc/ssl/certs$ jq '. | select(.user.username=="system:serviceaccount:calico-system:calico-typha")' /var/log/calico/audit/*.log | jq -r '[
.objectRef.resource,.verb,.level][-3:] | @csv' | sort | uniq -c | sort -b -n
72 "globalfelixconfigs","get","RequestResponse"
72 "tiers","create","RequestResponse"
80 "bgppeers","list","RequestResponse"
80 "clusterinformations","list","RequestResponse"
80 "felixconfigurations","list","RequestResponse"
80 "globalnetworkpolicies","list","RequestResponse"
80 "globalnetworksets","list","RequestResponse"
80 "hostendpoints","list","RequestResponse"
80 "licensekeys","list","RequestResponse"
80 "networksets","list","RequestResponse"
80 "pods","list","RequestResponse"
80 "stagedglobalnetworkpolicies","list","RequestResponse"
80 "stagedkubernetesnetworkpolicies","list","RequestResponse"
80 "stagednetworkpolicies","list","RequestResponse"
80 "tiers","list","RequestResponse"
82 "bgpconfigurations","list","RequestResponse"
84 "remoteclusterconfigurations","list","RequestResponse"
92 "namespaces","list","RequestResponse"
92 "serviceaccounts","list","RequestResponse"
144 "clusterinformations","get","RequestResponse"
160 "ippools","list","RequestResponse"
208 "ipamblocks","list","RequestResponse"
224 "networkpolicies","list","RequestResponse"
1379 "pods","watch","RequestResponse"
1517 "namespaces","watch","RequestResponse"
1517 "serviceaccounts","watch","RequestResponse"
2677 "nodes","watch","RequestResponse"
25510 "blockaffinities","list","RequestResponse"
38057 "globalnetworksets","watch","RequestResponse"
38132 "stagedkubernetesnetworkpolicies","watch","RequestResponse"
38150 "bgpconfigurations","watch","RequestResponse"
38189 "clusterinformations","watch","RequestResponse"
38195 "bgppeers","watch","RequestResponse"
38204 "globalnetworkpolicies","watch","RequestResponse"
38216 "remoteclusterconfigurations","watch","RequestResponse"
38216 "stagednetworkpolicies","watch","RequestResponse"
38222 "licensekeys","watch","RequestResponse"
38228 "tiers","watch","RequestResponse"
38261 "networksets","watch","RequestResponse"
38312 "hostendpoints","watch","RequestResponse"
38315 "felixconfigurations","watch","RequestResponse"
38372 "stagedglobalnetworkpolicies","watch","RequestResponse"
38411 "ipamblocks","watch","RequestResponse"
72672 "endpoints","get","RequestResponse"
72832 "nodes","list","RequestResponse"
76406 "blockaffinities","watch","RequestResponse"
76498 "networkpolicies","watch","RequestResponse"
76537 "ippools","watch","RequestResponse"
ubuntu@ip-10-0-0-10:/etc/ssl/certs$
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment