kubectl-capture
kubectl-capture copied to clipboard
A kubectl plugin which triggers a Sysdig capture
Trying to capture the systemcalls both with or without the --ebpf flag. No file is created on my pc after the capture as the tool says it has done: `kubectl...
``` $ kubectl capture app-586868cdc-8dkgm -ns mynamespace -M 30 --snaplen 256 Sysdig is starting to capture system calls: Node: gke-cluster-default-pool-93caf4f1-6b2j Pod: app-586868cdc-8dkgm Duration: 30 seconds Parameters for Sysdig: -S -M...
minikube type: Control Plane host: Running kubelet: Stopped apiserver: Stopped kubeconfig: Configured
Any chance of passing a -n for the namespace like the rest of kubectl and most kubectl plugins? $ kubectl capture -ns coolnamespace utility Sysdig is starting to capture system...
here is the capturer pod log ``` * Setting up /usr/src links from host * Unloading sysdig-probe, if present * Running dkms install for sysdig Error! echo Your kernel headers...
I came across a following issue. Once started the capture will never stop (until I ctrl+c it). Looking into the code I found out that the wait_until_finished function is checking...
Successfully capture pod log and scrap.gz file download to local MacOs machine. But unable to extract .gz file and getting gunzip - unexpected end of file tar - Unrecognized archive...
Hi team, I am executing : `kubectl capture xxx-deployment-687bd87b86-p2264` but getting error during `gunzip` ``` $ gunzip capture-xxx-deployment-687bd87b86-p2264-1571295964.scap.gz gzip: capture-xxx-deployment-687bd87b86-p2264-1571295964.scap.gz: unexpected end of file ``` ``` $ kubectl version Client...
When I run the following command: `sudo kubectl capture test --ebpf -M 10 --snaplen 256` It says the capture has been saved to the working directory, this is however not...
``` adamantium:kubectl-capture jhayner$ /Applications/Sysdig\ Inspect.app/Contents/Resources/app/ember-electron/resources/sysdig/sysdig --version sysdig version 0.26.1 adamantium:kubectl-capture jhayner$ file capture-1563982162.scap capture-1563982162.scap: pcap-ng capture file - version 1.2 adamantium:kubectl-capture jhayner$ /Applications/Sysdig\ Inspect.app/Contents/Resources/app/ember-electron/resources/sysdig/sysdig -r capture-1563982162.scap ``` > res =...