Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
Typha vs. Calico API calls
ubuntu@ip-10-0-0-10:/etc/ssl/certs$ wc -l /var/log/calico/audit/*.log
107277 /var/log/calico/audit/kube-audit-2020-03-29T08-57-32.700.log
106653 /var/log/calico/audit/kube-audit-2020-03-29T16-53-48.413.log
104603 /var/log/calico/audit/kube-audit-2020-03-30T00-29-47.085.log
107721 /var/log/calico/audit/kube-audit-2020-03-30T08-34-25.677.log
107872 /var/log/calico/audit/kube-audit-2020-03-30T16-41-21.889.log
107897 /var/log/calico/audit/kube-audit-2020-03-31T00-47-09.971.log
107595 /var/log/calico/audit/kube-audit-2020-03-31T08-51-49.553.log
107078 /var/log/calico/audit/kube-audit-2020-03-31T16-54-55.237.log
106973 /var/log/calico/audit/kube-audit-2020-04-01T00-58-26.450.log
99853 /var/log/calico/audit/kube-audit.log
1063522 total
ubuntu@ip-10-0-0-10:/etc/ssl/certs$
ubuntu@ip-10-0-0-10:/etc/ssl/certs$ jq '. | select(.user.username=="system:serviceaccount:calico-system:calico-node")' /var/log/calico/audit/*.log | jq -r '[.objectRef.resource,.verb,.level][-3:] | @csv' | sort | uniq -c | sort -b -n
30 "globalfelixconfigs","get","RequestResponse"
30 "nodes","patch","RequestResponse"
30 "nodes","update","RequestResponse"
30 "tiers","create","RequestResponse"
140 "bgpconfigurations","get","RequestResponse"
222 "ipamhandles","delete","RequestResponse"
222 "ipamhandles","update","RequestResponse"
226 "pods","patch","RequestResponse"
232 "blockaffinities","get","RequestResponse"
232 "blockaffinities","list","RequestResponse"
232 "ipamconfigs","get","RequestResponse"
232 "ipamhandles","create","RequestResponse"
232 "namespaces","get","RequestResponse"
286 "felixconfigurations","get","RequestResponse"
396 "services","get","RequestResponse"
454 "ipamblocks","get","RequestResponse"
454 "ipamblocks","update","RequestResponse"
672 "clusterinformations","get","RequestResponse"
716 "pods","get","RequestResponse"
852 "nodes","get","RequestResponse"
1008 "ippools","list","RequestResponse"
1192 "ipamhandles","get","RequestResponse"
72698 "licensekeys","get","RequestResponse"
ubuntu@ip-10-0-0-10:/etc/ssl/certs$
ubuntu@ip-10-0-0-10:/etc/ssl/certs$ jq '. | select(.user.username=="system:serviceaccount:calico-system:calico-typha")' /var/log/calico/audit/*.log | jq -r '[
.objectRef.resource,.verb,.level][-3:] | @csv' | sort | uniq -c | sort -b -n
72 "globalfelixconfigs","get","RequestResponse"
72 "tiers","create","RequestResponse"
80 "bgppeers","list","RequestResponse"
80 "clusterinformations","list","RequestResponse"
80 "felixconfigurations","list","RequestResponse"
80 "globalnetworkpolicies","list","RequestResponse"
80 "globalnetworksets","list","RequestResponse"
80 "hostendpoints","list","RequestResponse"
80 "licensekeys","list","RequestResponse"
80 "networksets","list","RequestResponse"
80 "pods","list","RequestResponse"
80 "stagedglobalnetworkpolicies","list","RequestResponse"
80 "stagedkubernetesnetworkpolicies","list","RequestResponse"
80 "stagednetworkpolicies","list","RequestResponse"
80 "tiers","list","RequestResponse"
82 "bgpconfigurations","list","RequestResponse"
84 "remoteclusterconfigurations","list","RequestResponse"
92 "namespaces","list","RequestResponse"
92 "serviceaccounts","list","RequestResponse"
144 "clusterinformations","get","RequestResponse"
160 "ippools","list","RequestResponse"
208 "ipamblocks","list","RequestResponse"
224 "networkpolicies","list","RequestResponse"
1379 "pods","watch","RequestResponse"
1517 "namespaces","watch","RequestResponse"
1517 "serviceaccounts","watch","RequestResponse"
2677 "nodes","watch","RequestResponse"
25510 "blockaffinities","list","RequestResponse"
38057 "globalnetworksets","watch","RequestResponse"
38132 "stagedkubernetesnetworkpolicies","watch","RequestResponse"
38150 "bgpconfigurations","watch","RequestResponse"
38189 "clusterinformations","watch","RequestResponse"
38195 "bgppeers","watch","RequestResponse"
38204 "globalnetworkpolicies","watch","RequestResponse"
38216 "remoteclusterconfigurations","watch","RequestResponse"
38216 "stagednetworkpolicies","watch","RequestResponse"
38222 "licensekeys","watch","RequestResponse"
38228 "tiers","watch","RequestResponse"
38261 "networksets","watch","RequestResponse"
38312 "hostendpoints","watch","RequestResponse"
38315 "felixconfigurations","watch","RequestResponse"
38372 "stagedglobalnetworkpolicies","watch","RequestResponse"
38411 "ipamblocks","watch","RequestResponse"
72672 "endpoints","get","RequestResponse"
72832 "nodes","list","RequestResponse"
76406 "blockaffinities","watch","RequestResponse"
76498 "networkpolicies","watch","RequestResponse"
76537 "ippools","watch","RequestResponse"
ubuntu@ip-10-0-0-10:/etc/ssl/certs$
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment