Lab 7.4 Errata

rbkasprzyk

The tracee command described in instruction 5 will fail, as tracee does not recognize container:all as a valid filtering criteria

rbkasprzyk

Also going to add here since I'm running into this issue, but grepping for special as described does not seem to work. In fact, the only way I seem to get events from the container in question is to remove the filter from tracee and grep more generically for nginx. Thoughts?

rbkasprzyk

Yup, reverting back to 0.3.1 has the command working as printed.

rbkasprzyk

Yeah, the instructions are pinned to 0.4.0 for some reason, though it sounds like your intent was to pin to 0.3.1.

Happy to keep providing feedback. I want to help this course be as good a prep for the CKS exam as it can possibly be.

Flavia

The lab has been updated.

rbkasprzyk

If I could make one additional suggestion for this lab, a simple way to make this lab more deterministic wrt Pod scheduling would be to cordon the nodes other than the one where tracee is supposed to be run before creating the special Deployment. Then you could cut out all the extra scaling directions and reduce it down to a cordon and uncordon command. Much simpler than mucking around with NodeAffinity rules.