cilium / tetragon

eBPF-based Security Observability and Runtime Enforcement
https://tetragon.io
Apache License 2.0
3.68k stars 374 forks source link

docs: Network Monitoring SERVICECIDR command for KinD doesn't work for named clusters #3182

Open tiswanso opened 1 day ago

tiswanso commented 1 day ago

In the section Monitoring Kubernetes Network Access, the command in the KinD tab for the SERVICECIDR env var assumes the KinD cluster is created without a name.

To avoid the naming issue it should match on the kube-apiserver component label instead like:

export SERVICECIDR=$(kubectl describe pod -n kube-system -l component=kube-apiserver | awk -F= '/--service-cluster-ip-range/ {print $2; }')
mtardy commented 18 hours ago

Hello! Good idea, would you like to do a documentation PR to fix that? :)