Typha vs. Calico API calls

gistfile1.txt

ubuntu@ip-10-0-0-10:/etc/ssl/certs$ wc -l /var/log/calico/audit/*.log
    107277 /var/log/calico/audit/kube-audit-2020-03-29T08-57-32.700.log
    106653 /var/log/calico/audit/kube-audit-2020-03-29T16-53-48.413.log
    104603 /var/log/calico/audit/kube-audit-2020-03-30T00-29-47.085.log
    107721 /var/log/calico/audit/kube-audit-2020-03-30T08-34-25.677.log
    107872 /var/log/calico/audit/kube-audit-2020-03-30T16-41-21.889.log
    107897 /var/log/calico/audit/kube-audit-2020-03-31T00-47-09.971.log
    107595 /var/log/calico/audit/kube-audit-2020-03-31T08-51-49.553.log
    107078 /var/log/calico/audit/kube-audit-2020-03-31T16-54-55.237.log
    106973 /var/log/calico/audit/kube-audit-2020-04-01T00-58-26.450.log
     99853 /var/log/calico/audit/kube-audit.log
   1063522 total
ubuntu@ip-10-0-0-10:/etc/ssl/certs$ 

ubuntu@ip-10-0-0-10:/etc/ssl/certs$ jq '. | select(.user.username=="system:serviceaccount:calico-system:calico-node")' /var/log/calico/audit/*.log | jq -r '[.objectRef.resource,.verb,.level][-3:] | @csv' | sort | uniq -c | sort -b -n 
     30 "globalfelixconfigs","get","RequestResponse"
     30 "nodes","patch","RequestResponse"
     30 "nodes","update","RequestResponse"
     30 "tiers","create","RequestResponse"
    140 "bgpconfigurations","get","RequestResponse"
    222 "ipamhandles","delete","RequestResponse"
    222 "ipamhandles","update","RequestResponse"
    226 "pods","patch","RequestResponse"
    232 "blockaffinities","get","RequestResponse"
    232 "blockaffinities","list","RequestResponse"
    232 "ipamconfigs","get","RequestResponse"
    232 "ipamhandles","create","RequestResponse"
    232 "namespaces","get","RequestResponse"
    286 "felixconfigurations","get","RequestResponse"
    396 "services","get","RequestResponse"
    454 "ipamblocks","get","RequestResponse"
    454 "ipamblocks","update","RequestResponse"
    672 "clusterinformations","get","RequestResponse"
    716 "pods","get","RequestResponse"
    852 "nodes","get","RequestResponse"
   1008 "ippools","list","RequestResponse"
   1192 "ipamhandles","get","RequestResponse"
  72698 "licensekeys","get","RequestResponse"
ubuntu@ip-10-0-0-10:/etc/ssl/certs$ 


ubuntu@ip-10-0-0-10:/etc/ssl/certs$ jq '. | select(.user.username=="system:serviceaccount:calico-system:calico-typha")' /var/log/calico/audit/*.log | jq -r '[
.objectRef.resource,.verb,.level][-3:] | @csv' | sort | uniq -c | sort -b -n                                                                                  
     72 "globalfelixconfigs","get","RequestResponse"                                                                                                          
     72 "tiers","create","RequestResponse"                                                                                                                    
     80 "bgppeers","list","RequestResponse"                                                                                                                   
     80 "clusterinformations","list","RequestResponse"                                                                                                        
     80 "felixconfigurations","list","RequestResponse"                                                                                                        
     80 "globalnetworkpolicies","list","RequestResponse"                                                                                                      
     80 "globalnetworksets","list","RequestResponse"                                                                                                          
     80 "hostendpoints","list","RequestResponse"                                                                                                              
     80 "licensekeys","list","RequestResponse"                                                                                                                
     80 "networksets","list","RequestResponse"
     80 "pods","list","RequestResponse"
     80 "stagedglobalnetworkpolicies","list","RequestResponse"
     80 "stagedkubernetesnetworkpolicies","list","RequestResponse"
     80 "stagednetworkpolicies","list","RequestResponse"
     80 "tiers","list","RequestResponse"
     82 "bgpconfigurations","list","RequestResponse"
     84 "remoteclusterconfigurations","list","RequestResponse"
     92 "namespaces","list","RequestResponse"
     92 "serviceaccounts","list","RequestResponse"
    144 "clusterinformations","get","RequestResponse"
    160 "ippools","list","RequestResponse"
    208 "ipamblocks","list","RequestResponse"
    224 "networkpolicies","list","RequestResponse"
   1379 "pods","watch","RequestResponse"
   1517 "namespaces","watch","RequestResponse"
   1517 "serviceaccounts","watch","RequestResponse"
   2677 "nodes","watch","RequestResponse"
  25510 "blockaffinities","list","RequestResponse"
  38057 "globalnetworksets","watch","RequestResponse"
  38132 "stagedkubernetesnetworkpolicies","watch","RequestResponse"
  38150 "bgpconfigurations","watch","RequestResponse"
  38189 "clusterinformations","watch","RequestResponse"
  38195 "bgppeers","watch","RequestResponse"
  38204 "globalnetworkpolicies","watch","RequestResponse"
  38216 "remoteclusterconfigurations","watch","RequestResponse"
  38216 "stagednetworkpolicies","watch","RequestResponse"
  38222 "licensekeys","watch","RequestResponse"
  38228 "tiers","watch","RequestResponse"
  38261 "networksets","watch","RequestResponse"
  38312 "hostendpoints","watch","RequestResponse"
  38315 "felixconfigurations","watch","RequestResponse"
  38372 "stagedglobalnetworkpolicies","watch","RequestResponse"
  38411 "ipamblocks","watch","RequestResponse"
  72672 "endpoints","get","RequestResponse"
  72832 "nodes","list","RequestResponse"
  76406 "blockaffinities","watch","RequestResponse"
  76498 "networkpolicies","watch","RequestResponse"
  76537 "ippools","watch","RequestResponse"
ubuntu@ip-10-0-0-10:/etc/ssl/certs$