kshark

A kubectl plugin that allows us to gather network information with tcpdump command without no binary injection on your pods.

This plugin use the debug containers to inject your pods and gather tcpdump data.

Usage

This the current example usage of kubectl shark command.This command allows us to run different kind a analysis on wireshark.

    kubectl shark -p <POD-NAME> -n kube-system -i eth0

Usage

If you want to run debug containers on your Kubernetes cluster you need to enable FeatureGates on your components shown as below on api-server and controller-manager.

   ... 
   ...
   --feature-gates=EphemeralContainers=true

In EKS;

EKS allows us to use debug with the newer versions on Kubernetes so that ability will be managed kubernetes users.

Installation

kubectl-shark has got very simple installation type like shown as below;

    pip3 install . --upgrade