kube-dnstap

Find out which pods are querying which domains in your Kubernetes cluster.

Usage

$ kubectl create ns dnstap
$ kubectl apply -f https://raw.githubusercontent.com/microcumulus/kube-dnstap/master/k8s.yaml

CoreDNS:

$ kubectl -n kube-system edit cm coredns

Add to the main block:

  dnstap {
    dnstap tcp://dnstap.default:12345 full
  }

The following configs can be set via environment variables (_ separated) or yaml keys in /etc/kube-dnstap.yaml:

suffixes:
  ignore:
    - .cluster.local.
  only: # Overrides ignore
    - .example.com.
listen:
  addr: 0.0.0.0:12345
metrics:
  addr: 0.0.0.0:8080