support HTTPS certificate-based authentication with k8s API server

[meonkeys]

We use cert-based auth to talk with our kubernetes v1.1.1 API server. I don't see a way to talk to it with csysdig. Sysdig Cloud does work.

[aleks-f]

Supported in Sysdig Cloud only. There are no immediate plans for support in open source version.

[gianlucaborello]

Should be fixed with 0.7.0. Refer to release notes and to sysdig --help for the proper syntax

[meonkeys]

Nice, thanks! I'll try it out!

[meonkeys]

FYI, I couldn't get this to work, but I think I have an incorrect core assuption.

Can I use csysdig to monitor my (remote) kubernetes cluster? The client seems to expect that I'm running sysdig locally. It always wants to access the local file /dev/sysdig0. (also asked in IRC a few hours ago, but I didn't hear back)

[gianlucaborello]

At the moment, you can't use csysdig/sysdig to monitor a remote Kubernetes cluster. You will just be able to monitor the local Kubernetes node where your instance is running. The connection to the Kubernetes API server is done in order to fetch metadata information about your local containers (pods, labels, controllers, and all the other Kubernetes entities they belong to).

The idea behind it is that you should use a distributed monitoring and troubleshooting tool like Sysdig Cloud to keep an eye on your overall cluster and, when needed, zoom into a specific node using a lower level tool such as sysdig/csysdig.