dims

Kubernetes API Audit Log Analysis

Tools for analyzing Kubernetes API coverage from E2E test audit logs.

Copy the two python scripts from https://github.com/kubernetes/test-infra/tree/master/experiment/audit to your local directory

The example below uses kubernetes/kubernetes#133132 which is a PR to add a new DRA test to conformance.

Quick Start

dims

• To create the vm:

limactl start containerd-ubuntu.yaml --yes

• To get into the vm:

limactl shell --workdir /home/lima/containerd containerd-ubuntu

dims

package main

import (
	"fmt"
	"go/parser"
	"go/token"
	"os"
	"path/filepath"
	"sort"
	"strings"

dims

#!/bin/bash

cat > ubuntu-pod.json <<EOF
{
  "metadata": {
    "name": "ubuntu-sandbox",
    "namespace": "default",
    "attempt": 1,
    "uid": "ubuntu-pod-uid"
  },

dims

# Create a fresh new Ubuntu 24.04 VM and run the commands below:

# Install a bunch of stuff we need
apt update && apt -y install gperf sudo htop psutils build-essential pkg-config git wget unzip

# Clone what we need
git clone https://github.com/kubernetes/kubernetes $HOME/go/src/k8s.io/kubernetes
git clone https://github.com/containerd/containerd $HOME/go/src/github.com/containerd/containerd

# Latest golang

dims

#!/usr/bin/env bash

# Default repository and job name
REPO="google/cadvisor"
JOB_NAME="pull-cadvisor-e2e"

# Function to display usage
usage() {
    echo "Usage: $0 -p <PR_NUMBER> [-j <JOB_NAME>] [-s <SHA>] [-r <REPOSITORY>]"
    echo "Example: $0 -p 3615"

dims

Notes

Deploy using kubectl apply -f deepseek.yaml and watch the logs on the pod. When you see vllm listening on port 8000, use port forward so you can try running python query.py

kubectl port-forward svc/deepseek-r1-server 8000:8000

Links

dims

1. run the main.go using go run main.go
2. find the pid of the process and send a USR1 signal using kill -USR1 pid-of-main
3. the heap_profile.pprof will be generated in the directory the main process was running
4. run go tool pprof -http=:8081 heap_profile.pprof to visualize the heap

dims

Feature	Alpha	Beta	GA	Deprecated	Links
APIResponseCompression	1.8	1.16 ☑️			code KEPs
APIServerIdentity	1.20	1.26 ☑️			code KEPs
APIServerTracing	1.22	1.27 ☑️			code [KEPs](https://cs.k8s.io/?q=%5CbAPIServerTracing%5Cb&i=nope&files=&excludeFiles=CHANGELOG&repos=kubernetes/enhancement

dims

#!/bin/bash

aws eks describe-addon-versions | jq -r '.addons[] | 
 {
  addon: .addonName,
  versions: [
    .addonVersions[] | {
      version: .addonVersion,
      kubernetes_versions: [
        .compatibilities[].clusterVersion