You can search for Kubernetes entities details in vRealize Network Insight.
Common Queries
- Search Flows :
flows where Kubernetes Object = Object name
Example: flows where Kubernetes Cluster = 'Production'
-
View the service scale:
kubernetes pods group by Kubernetes Services
- View the node load:
kubernetes Pods group by Kubernetes Node
- View the node health:
MemoryPressure and PIDPressure and DiskPressure and Ready of Kubernetes Node
- View flow compliance:
flows from Kubernetes Object name of the object to Kubernetes Object name of the object
Example:
flows from Kubernetes Namespace'PCI' to Kubernetes Namespace'Non-PCI'
-
View the Path topology:
- Kubernetes service service name to Kubernetes service service name
- Kubernetes service service name to Kubernetes pod pod name
- Kubernetes pod pod name to Kubernetes pod pod name
Table 1. Queries on Kubernetes Object Kubernetes Object Query Description Namespace - kubernetes namespace where L2 Networks = 'a'
- list(Kubernetes Node) of Kubernetes Pod where Kubernetes Namespace = 'a'
- Return the Kubernetes namespace where it is connected to L2 Network 'a'
- Return the list of Kubernetes nodes where Kubernetes namespace is 'a'
Pod - NSX-T Logical port where connectedto.modelKey in (modelKey of kubernetes nodes) order by Tx Packets desc
- NSX-T Logical port where connectedto.modelKey in (modelKey of kubernetes pods) and Rx Packet Drops > 0
- new kubernetes pod in last 1 hour
- Return the list of logical ports which are connected to a node based on transferred packets in descending order
- Return the list of logical ports which are connected to Kubernetes pods and Rx dropped packets > 0
- New Kubernetes pods discovered in last one hour
Services - kubernetes pods where kubernetes services is not set
- kubernetes pods group by Kubernetes Services, Kubernetes Cluster
- List of Kubernetes pods that does not have a service
- Number of pods running on each service
Nodes - kubernetes nodes where Ready != 'True'
- kubernetes node where Virtual Machine = 'vm-a'
- List of unhealthy Kubernetes nodes
- Kubernetes node that is part of 'vm-a' virtual machine
Flows - flows where kubernetes service is set
- flows where source kubernetes node = 'a'
- List of flows where either a source or a destination Kubernetes service exists
- List of flows where source Kubernetes node = 'a' or destination Kubernetes node = 'a'
Entity/Components | Query | Description |
---|---|---|
Applications that have Kubernetes entities | application where virtual member = ‘service-a’ | List of all applications where Kubernetes service ‘service-a’ is a member |
application where virtual member = ‘service-a’ and virtual member.Kubernetes Namespace = ‘namespace-b’ | List of all applications where Kubernetes service ‘service-a’ and Kubernetes namespace is ‘namespace-b’ is a member | |
tier where virtual member = ‘service-a’ and virtual member.Kubernetes Namespace = ‘namespace-b’ | List of all tiers where Kubernetes service ‘service-a’ and Kubernetes namespace is ‘namespace-b’ is a member | |
count of applications where Virtual Member in (kubernetes services) | The number of applications where member is of type Kubernetes service | |
count of applications where virtual member in (kubernetes services where Kubernetes Namespace = ‘sock-shop’) | The number of applications where member is of type Kubernetes service which is under Kubernetes namespace ‘sock-shop’ | |
list(virtual member) of applications where Name = ‘app-1’ and virtual member.Kubernetes Cluster is set | List of all the Kubernetes services as members for the application ‘app-1’ | |
Metrics | nsx-t logical port where (ConnectedTo in (Kubernetes Pods where kubernetes cluster is set)) and Rx Packet Drops > 0 group by ConnectedTo order by max(Rx Packet Drops) | Rx Packet drops that are grouped based on Kubernetes pod |
nsx-t logical port where (ConnectedTo in (Kubernetes Nodes where kubernetes cluster is set)) and Rx Packet Drops > 0 group by ConnectedTo order by max(Rx Packet Drops) | Rx Packet drops that are grouped based on Kubernetes node | |
nsx-t logical switch where Rx Packet Drops > 0 and Tag like ‘ncp/project:’ order by Rx Packet Drops | Rx Packet drops that are grouped based on Kubernetes namespace | |
nsx-t logical switch where Rx Packet Drops > 0 and Tag like ‘ncp/project:<namespace name>’ | Rx Packet drops that are specific to a Kubernetes namespace | |
nsx-t logical port where (ConnectedTo in (Kubernetes Pods where kubernetes cluster is set)) and Rx Packet Drops > 0 group by ConnectedTo.Kubernetes service order by max(Rx Packet Drops) | Rx Packet drops that are grouped based on Kubernetes services | |
flows where firewall action = ‘DROP’ group by Kubernetes Service | Drop flows that are grouped based on Kubernetes services | |
flows where firewall action = ‘DROP’ group by source Kubernetes Namespace | List of all dropped flows that are grouped based on Kubernetes namespace | |
Kubernetes events | Kubernetes events where Problem Entity = ‘<pod/namespace/node Name>’ | List of all Kubernetes events for the given Kubernetes entity. Kubernetes entity would be either pod or namespace or node |
Kubernetes events where Event code = ‘ImagePullBackOff’ in last 24 hours | List of Kubernetes events of type ‘ImagePullBackOff’ in last 24 hours | |
Kubernetes events where problem entity.Kubernetes Cluster = ‘<cluster-a>’ | List of all Kubernetes events for the given cluster |