PACKET CAPTURE IN A CONTAINER ORCHESTRATION SYSTEM

1 . A method of packet capture in a container orchestration (CO) system, comprising:

receiving, from a user interface executing on a client device, a packet capture request from a user at a packet capture agent executing in a node of the CO system;

authenticating and authorizing, by the packet capture agent in cooperation with an application programming interface (API) server executing in a master server of the CO system, the user specified in the packet capture request;

capturing, by the packet capture agent, packets from at least one network interface based on the packet capture request; and

returning information based on the packets as captured from the packet capture agent to the user interface.

2 . The method of claim 1 , further comprising:

presenting, by the user interface, the information to the user.

3 . The method of claim 1 , wherein the packet capture request specifies a pod or a namespace, and wherein the method further comprises:

obtaining, by the user interface, a node corresponding to the pod or namespace from the API server.

4 . The method of claim 1 , wherein the step of capturing comprises:

capturing packets from a plurality of network interfaces of the virtual switch.

5 . The method of claim 1 , wherein the step of capturing comprises:

identifying a network interface of the virtual switch associated with a pod specified in the packet capture request;

capturing packets from the identified network interface.

6 . The method of claim 1 , wherein the node comprises a host and wherein the packet capture agent executes in a hypervisor executing on the host.

7 . The method of claim 6 , wherein the virtual switch executes in the hypervisor and includes virtual network interfaces for pod virtual machines (VMs).

8 . A non-transitory computer readable medium comprising instructions to be executed in a computing device to cause the computing device to carry out a method of packet capture in a container orchestration (CO) system, comprising:

receiving, from a user interface executing on a client device, a packet capture request from a user at a packet capture agent executing in a node of the CO system;

authenticating and authorizing, by the packet capture agent in cooperation with an application programming interface (API) server executing in a master server of the CO system, the user specified in the packet capture request;

capturing, by the packet capture agent, packets from at least one network interface based on the packet capture request; and

returning information based on the packets as captured from the packet capture agent to the user interface.

9 . The non-transitory computer readable medium of claim 8 , further comprising:

presenting, by the user interface, the information to the user.

10 . The non-transitory computer readable medium of claim 8 , wherein the packet capture request specifies a pod or a namespace, and wherein the method further comprises:

obtaining, by the user interface, a node corresponding to the pod or namespace from the API server.

11 . The non-transitory computer readable medium of claim 8 , wherein the step of capturing comprises:

capturing packets from a plurality of network interfaces of the virtual switch.

12 . The non-transitory computer readable medium of claim 8 , wherein the step of capturing comprises:

identifying a network interface of the virtual switch associated with a pod specified in the packet capture request;

capturing packets from the identified network interface.

13 . The non-transitory computer readable medium of claim 8 , wherein the node comprises a host and wherein the packet capture agent executes in a hypervisor executing on the host.

14 . The non-transitory computer readable medium of claim 13 , wherein the virtual switch executes in the hypervisor and includes virtual network interfaces for pod virtual machines (VMs).

15 . A container orchestration (CO) system, comprising:

a master server executing an application programming interface (API) server;

a client executing a user interface (UI);

a worker node executing a packet capture agent, a virtual switch, and at least one pod;

wherein the UI is configured to receive a packet capture request from a user and send the packet capture request to the packet capture agent based on target specified in the packet capture request;

wherein the packet capture agent is configured to authenticate and authorize, in cooperation with the API server, the user specified in the packet capture request; capture packets from at least one network interface based on the packet capture request; and return information based on the packets as captured from the packet capture agent to the UI.

16 . The CO system of claim 15 , wherein the UI is configured to present the information to the user.

17 . The CO system of claim 15 , wherein the packet capture request specifies a pod or a namespace, and the UI is configured to obtain a node corresponding to the pod or namespace from the API server.

18 . The CO system of claim 15 , wherein the packet capture agent is configured to capture packets from a plurality of network interfaces of the virtual switch.

19 . The CO system of claim 15 , wherein the packet capture agent is configured to identify a network interface of the virtual switch associated with a pod specified in the packet capture request; and capture packets from the identified network interface.

20 . The CO system of claim 15 , wherein the node comprises a host and wherein the packet capture agent executes in a hypervisor executing on the host.