topic How to get the cloud provider name from Kubertenes in DQL

How to get the cloud provider name from Kubertenes

AurelienGravier — Thu, 16 Jan 2025 06:13:06 GMT

Hello,

The only way I've found to determine whether a cluster is running on AKS or EKS is to use a classicEntitySelector like this:

fetch dt.entity.cloud_application_namespace | filter in (id, classicEntitySelector("""type(CLOUD_APPLICATION_NAMESPACE),toRelationships.isClusterOfNamespace(type(KUBERNETES_CLUSTER),fromRelationships.isClusterOfNode(type(KUBERNETES_NODE),kubernetesProviderType("PROVIDER_TYPE_EKS")))""")) | fieldsAdd CLOUD_PROVIDER = "AWS" | append [ fetch dt.entity.cloud_application_namespace | filter in (id, classicEntitySelector("""type(CLOUD_APPLICATION_NAMESPACE),toRelationships.isClusterOfNamespace(type(KUBERNETES_CLUSTER),fromRelationships.isClusterOfNode(type(KUBERNETES_NODE),kubernetesProviderType("PROVIDER_TYPE_AKS")))""")) | fieldsAdd CLOUD_PROVIDER = "AZURE"]

It's quite limiting, because I can only use the classicEntitySelector through a filter.

As a result, I have to repeat the command through multiple appends, and I'm unable to handle cloud providers that aren't explicitly declared.

Do you have another idea for collecting this information?

Thanks. Aurélien.

Re: How to get the cloud provider name from Kubertenes

amine_bergi — Mon, 20 Jan 2025 17:47:09 GMT

Hello Aurélien,
The property kubernetesProviderType is already present in the node entity, so you can use it without using the classicEntitySelector.
Here's the dql statement that you could use for instance:

fetch dt.entity.cloud_application_namespace | fields namespace_name=entity.name,clustered_by[dt.entity.kubernetes_cluster] | join [ fetch dt.entity.kubernetes_node | fields clustered_by[dt.entity.kubernetes_cluster] , kubernetesProviderType], on:{`clustered_by[dt.entity.kubernetes_cluster]`} | fieldsAdd cluster=entityName(`clustered_by[dt.entity.kubernetes_cluster]`,type:"dt.entity.kubernetes_cluster"),provider_type=right.kubernetesProviderType |fieldskeep cluster, namespace_name,provider_type

Amine

Re: How to get the cloud provider name from Kubertenes

AurelienGravier — Tue, 21 Jan 2025 08:26:25 GMT

Hello @amine_bergi
Perfect, thank you for your help.
Regards