search

aws-samples / eks-anywhere-addons

https://aws-samples.github.io/eks-anywhere-addons/
MIT No Attribution
21 stars 39 forks source link

Lacework EKS-A #103

Closed jefferyfry closed 11 months ago

jefferyfry commented 1 year ago

Issue #, if available:

Description of changes: Added Laceworks HelmRelease and supporting resources for EKS-A validation. New resources are located in: ./eks-anywhere-commons/Testers/Lacework/Polygraph ./eks-anywhere-commons/Addons/Partner/Lacework/Polygraph

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

jefferyfry commented 1 year ago

Removed the extraneous flux-system directory.

What's the best way for me to share the secrets?

shapirov103 commented 1 year ago

What's the best way for me to share the secrets?

Are you on AWS Developers slack? If yes, please share directly with me on DM. Otherwise, please send an email to shapirov@amazon.com elamaras@amazon.com

We can also onboard you onto the AWS Developers Slack for rapid feedback.

elamaran11 commented 1 year ago

@jefferyfry This does not work with new change too. Im getting same error. I would recommend updating the job to work fine and also testing it in your lab before reaching back. Please share us your job logs of successful run with your next submission.

❯ k logs lacework-agent-testjob-fkm8m -n lacework                                                                                                                                 ─╯
pod/lacework-agent-hs2t6 condition met
pod/lacework-agent-lt5hr condition met
pod/lacework-agent-pvs46 condition met
pod/lacework-agent-r7n8j condition met
shapirov103 commented 12 months ago

Same test job failure on Rover as well. Output stating the condition is met (three times - based on the number of agent pods maybe) then fails with an error status.

elamaran11 commented 11 months ago

Hi @jefferyfry I ran it now with your latest changes and i can see the test job is working fine in EKS-A Baremetal and i can see the stats.go in logs. So i can conclude the test job is working, i will have to run the PR with other deployment models and provide you a full cycle validation completion sometime soon.

time="2023-08-03T18:28:28.877Z" level=info msg="Pkt (lo)-Stats:{CTMap:290,DNSOut:4,DNSIn:4,DNS-MultiQs:0,Decode-DNS-Err:0,DirOwners:5,DirSyn:88,Drop-Dns-ErrResp:0,DropMal:34,Empty-DNS:0,Map:5,Pcap:1145,PcapSynAck:0,PcapSyn:0,PcapAck:0,PcapFin:0,PcapRst:0,PcapUnk:0,PktRx:2286,Sink-Conn-TCP:93,Sink-Conn-TCP-U:5,Sink-Conn-UDP:0,Sink-Conn-UDP-U:0,Sink-DNS:0,Track:88,ConnCount:93,ConnCountOwned:93,PCAPTickerProTime:{Name:lo PCAP ticker time in ms,UpperBounds:[1,2,4,8,16,32,64,128,256,512,1024,2048,4096,8192,16384,32768,65536,131072,262144,524288,1048576],Counts:[0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0],CumSum:1004,TotalCount:1,AvgVal:0}}" caller="stats.go:165" pid=914898
time="2023-08-03T18:28:28.878Z" level=info msg="Pkt (cilium_geneve)-Stats:{Bridged:14,CNIDrop:14386,CTMap:290,DNSOut:48,DNSIn:48,DNS-MultiQs:0,Decode-DNS-Err:0,Drop-Dns-ErrResp:0,Empty-DNS:0,Pcap:14502,PcapSynAck:0,PcapSyn:0,PcapAck:0,PcapFin:0,PcapRst:0,PcapUnk:0,PktRx:14045,Sink-Conn-TCP:0,Sink-Conn-TCP-U:0,Sink-Conn-UDP:0,Sink-Conn-UDP-U:0,Sink-DNS:0,PCAPTickerProTime:{Name:cilium_geneve PCAP ticker time in ms,UpperBounds:[1,2,4,8,16,32,64,128,256,512,1024,2048,4096,8192,16384,32768,65536,131072,262144,524288,1048576],Counts:[1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],CumSum:0,TotalCount:1,AvgVal:0}}" caller="stats.go:165" pid=914898

 ^‿^ Stats collection is running ^‿^
elamaran11 commented 11 months ago

Congratulations @jefferyfry your Addon is approved and merged and also listed in Validated Partners for 4 deployment models.

jefferyfry commented 11 months ago

Thank you!