I'm setting up a global network policy as follows, however the documentation claims the entries are in /var/log/syslog. But which pod or resource would let me see this information?
apiVersion: projectcalico.org/v3
kind: GlobalNetworkPolicy
metadata:
name: log-denied-packets
spec:
applyOnForward: true
preDNAT: true
ingress:
- action: Log
destination:
nets:
- <loadbalancer_IP>/32
ports:
- 80
protocol: TCP
source:
nets:
- <client_address>/32
- action: Log
destination:
nets:
- <loadbalancer_IP>/32
ports:
- 80
protocol: UDP
source:
nets:
- <client_address>/32
selector: ibm.role=='worker_public'
order: 300
types:
- Ingress
For Kubernetes plugin I found this in the calico docs:
How do I view Calico CNI logs?
The Calico CNI plugin emits logs to stderr, which are then logged out by the kubelet. Where these logs end up depend on how your kubelet is configured. For deployments using systemd, you can do this via journalctl.
Hope this help.