dims

Kubernetes API Audit Log Analysis

Tools for analyzing Kubernetes API coverage from E2E test audit logs.

Copy the two python scripts from https://github.com/kubernetes/test-infra/tree/master/experiment/audit to your local directory

The example below uses kubernetes/kubernetes#133132 which is a PR to add a new DRA test to conformance.

Quick Start

dims

• To create the vm:

limactl start containerd-ubuntu.yaml --yes

• To get into the vm:

limactl shell --workdir /home/lima/containerd containerd-ubuntu

dims

package main

import (
	"fmt"
	"go/parser"
	"go/token"
	"os"
	"path/filepath"
	"sort"
	"strings"

dims

#!/bin/bash

cat > ubuntu-pod.json <<EOF
{
  "metadata": {
    "name": "ubuntu-sandbox",
    "namespace": "default",
    "attempt": 1,
    "uid": "ubuntu-pod-uid"
  },

dims

# Create a fresh Ubuntu VM and run the commands below.
# Tested on a Brev CPU node (Ubuntu 22.04.5).
#
# Important: do not rely on the image-packaged containerd unless you have
# already verified that CRI is enabled and that CNI is installed/configured.
# Some cloud images ship containerd with CRI disabled and no /etc/cni/net.d
# config, which leaves kubelet NotReady during node e2e setup.

set -euxo pipefail

dims

#!/usr/bin/env bash

# Default repository and job name
REPO="google/cadvisor"
JOB_NAME="pull-cadvisor-e2e"

# Function to display usage
usage() {
    echo "Usage: $0 -p <PR_NUMBER> [-j <JOB_NAME>] [-s <SHA>] [-r <REPOSITORY>]"
    echo "Example: $0 -p 3615"

dims

Notes

Deploy using kubectl apply -f deepseek.yaml and watch the logs on the pod. When you see vllm listening on port 8000, use port forward so you can try running python query.py

kubectl port-forward svc/deepseek-r1-server 8000:8000

Links

dims

1. run the main.go using go run main.go
2. find the pid of the process and send a USR1 signal using kill -USR1 pid-of-main
3. the heap_profile.pprof will be generated in the directory the main process was running
4. run go tool pprof -http=:8081 heap_profile.pprof to visualize the heap

dims

Kubernetes Feature Gates

Feature	Stage	Enabled	Locked	Alpha	Beta	GA	Deprecated	Dependencies	Links
APIResponseCompression	Beta	☑️ 1.16+		1.8-1.15	1.16+				code KEPs
APIServerIdentity	Beta	☑️ 1.26+		1.20-1.25	1.26+				code [KEPs](https://cs.k8s.io/?q=%5CbAPIServerIdentity%5Cb&i=nope&files=&excludeFiles=CHANGELO

dims

#!/bin/bash

aws eks describe-addon-versions | jq -r '.addons[] | 
 {
  addon: .addonName,
  versions: [
    .addonVersions[] | {
      version: .addonVersion,
      kubernetes_versions: [
        .compatibilities[].clusterVersion