diff --git a/cmd/cni-metrics-helper/README.md b/cmd/cni-metrics-helper/README.md index 45676573d1..9c2d3c3063 100644 --- a/cmd/cni-metrics-helper/README.md +++ b/cmd/cni-metrics-helper/README.md @@ -15,24 +15,25 @@ The following diagram shows how `cni-metrics-helper` works in a cluster: As you can see in the diagram, the `cni-metrics-helper` connects to the API Server over https (`tcp/443`), and another connection is created from the API Server to the worker node over http (`tcp/61678`). If you deploy Amazon EKS with the recommended security groups from [Restricting cluster traffic](https://docs.aws.amazon.com/eks/latest/userguide/sec-group-reqs.html#security-group-restricting-cluster-traffic), then make sure that a security group is in place that allows the inbound connection from the API Server to the worker nodes over `tcp/61678`. Adding the CNI metrics helper will publish the following metrics to CloudWatch: -``` -"addReqCount", -"assignIPAddresses", -"awsAPIErr", -"awsAPILatency", -"awsUtilErr", -"delReqCount", -"eniAllocated", -"eniMaxAvailable", -"ipamdActionInProgress", -"ipamdErr", -"maxIPAddresses", -"podENIErr", -"reconcileCount", -"totalIPAddresses", -"totalIPv4Prefixes", -"totalAssignedIPv4sPerCidr" -``` + +| Metric | Description | +| ------ | ----------- | +| addReqCount | The number of IP address requests | +| assignIPAddresses | The number of IP addresses assigned to pods | +| awsAPIErr | The number of times AWS API returns an error | +| awsAPILatency | AWS API call latency in ms | +| awsUtilErr | The number of errors not handled in awsutils library | +| delReqCount | The number of delete IP address requests | +| eniAllocated | The number of ENIs allocated | +| eniMaxAvailable | The maximum number of ENIs that can be attached to this instance, accounting for unmanaged ENIs | +| ipamdActionInProgress | The number of ipamd actions in progress | +| ipamdErr | The number of errors encountered in ipamd | +| maxIPAddresses | The maximum number of IP addresses that can be allocated to the instance | +| podENIErr | The number of errors encountere for pod ENIs | +| reconcileCount | The number of times ipamd reconciles on ENIs and IP/Prefix addresses | +| totalIPAddresses | The total number of IP addresses | +| totalIPv4Prefixes | The total number of IPv4 prefixes | +| totalAssignedIPv4sPerCidr | The total number of IP addresses assigned per cidr | ## Using IRSA As per [AWS EKS Security Best Practice](https://docs.aws.amazon.com/eks/latest/userguide/best-practices-security.html), if you are using IRSA for pods then following requirements must be satisfied to succesfully publish metrics to CloudWatch