Sysdig Documentation

Namespaces Overview

Namespaces are virtual clusters on a physical cluster. They provide logical separation between the teams and their environments.

The Namespaces Overview page provides key metrics indicating the health, capacity, and performance of each Namespace in your cluster.

namespace_overview.png

Scope

The scope of Namespaces highlighted is dictated by two Kubernetes objects—Cluster and Namespace. Both the AND and OR operators are used to determining the scope: Clusters AND Namespaces ( a OR b OR c).

Understanding Namespaces Overview Metrics

Description

Color Scheme

Examples

Metrics

Pod Restarts

Shows the latest value of kubernetes.pod.restart.rate expressed as a percentage.

Pod Restarts should be zero.

The value returned by kubernetes.pod.restart.rate

Time aggregation is Rate.

Group aggregation is Sum.

Pod Guage

Represented as Pods Available vs Desired. This is the ratio between the total number of pods available and total number of pods desired for the Namespace.

Pods should be 100% available.

Red: The number of available pods is less than the desired number. The ratio of available and desired pods is less than 80%.

Yellow: The ratio of available and desired pods is between 80%-95%.

Green: The ratio of available and desired pods is between 95-100%.

Pod Guage should be 95-100% available.

94% indicates that out of 66 sample pods, approximately 62 pods are available. Therefore indicating in red.

It is the ratio of Kubernetes.namespace.pod.available.count (sum of pods available for all deployments, statefulsets and daemonsets in the namespace) and Kubernetes.namespace.pod.desired.count (sum of pods desired for all deployments, statefulsets and daemonsets in the namespace)

Time aggregation is Average.

Group aggregation is Sum.

CPU Guage

Represented as CPU Used vs Requests. This is the ratio of the total number of CPU cores used and the total number of CPU cores requested by each deployment.

Red: The ratio of used and requested CPU is greater than 110%.

Yellow: The ratio of used and requested cores is between 95%-110%.

Green: The ratio of used and requested cores is less than 95%.

12% indicates out of 50 CPU cores that are requested only 6 CPU cores are used.

The ratio of cpu.cores.used and kubernetes.pod.resourceRequests.cpuCores.

Time aggregation is Average.

Group aggregation is Sum.

Memory Guage

Represented as Memory Used vs Requests. This is the ratio of the total number of memory used and the total number of memory requested in bytes by each deployment.

Red: The ratio of used and requested memory is greater than 110%.

Yellow: The ratio of used and requested memory is between 95%-110%.

Green: The ratio of used and requested memory is is less than 95%.

2% indicates out of 190 Gib memory that is requested, only 3.8 Gib is used.

The ratio of memory.bytes.used (avg, sum) and kubernetes.pod.resourceRequests.memBytes (avg, sum)

Time aggregation is Average.

Group aggregation is Sum.

Network I/O

A sparkline graph.

The value returned by net.byte.total (rate. sum)

Time aggregation is Average.

Group aggregation is Average.

Events

Shows the severity level and the number of events for each type of severity—High, Low, Medium, and Info—in that order.

Red: The number of events that are in High severity state

Orange: The number of events that are in Medium severity state

Green: The number of events that are in Low severity state

Blue: The number of events that are Info.

Drill-Down Features

Workloads

Takes to the Workloads Overview page where you can do further investigation.

Kubernetes Namespace Overview

Takes to the Explore page for the selected Namespace where you can do further investigation.

Secure Image Scanning Results

If Sysdig Secure is enabled, clicking the option takes to the Image Scanning page for the selected deployment for further investigation. Image scanning allows you to scan container images for vulnerabilities, secrets, license violations, and reports:

  • Official OS packages

  • Unofficial OS packages

  • Configuration files

  • Credentials files

  • Localization modules and software-specific installers:

    • Javascript with NPM

    • Python PiP

    • Ruby with GEM

    • Java/JVM with .jar archives

  • Image metadata and configuration attributes