<p>I am new to Kubernetes <code>NetworkPolicy</code> and the Network plugin <code>calico</code>.</p>

<p>I have successfully implemented <code>calico</code> in my Kubernetes cluster:</p>

<pre><code>[root@node1 ~]# kubectl get po --all-namespaces -o wide | grep calico
kube-system     calico-kube-controllers-5d8b5bc986-sllmk                          1/1       Running
kube-system     calico-node-4wk8f                                                 1/1       Running
kube-system     calico-node-5kz99                                                 1/1       Running
kube-system     calico-node-bfk9w                                                 1/1       Running
kube-system     calico-node-f2tb2                                                 1/1       Running
kube-system     calico-node-hrcf4                                                 1/1       Running
kube-system     calico-node-wvh8d                                                 1/1       Running
</code></pre>

<p>I have also configured relevant network policies and they work perfectly fine.</p>

<p>The only only I am concerned about is logging. I am unable to find any logs that could tell me whether some request is being accepted or blocked.</p>

<p>Ive tried checking the logs of the <code>calico-nodes-*</code> pods but they do not provide any reasonable logs.</p>

<p>Are there any others logs that I can look at ?  </p>

<p>Kubernetes <code>NetworkPolicy</code> doesn't support logging, but Calico's native <code>NetworkPolicy</code> supports a "log" action that allows you to log packets to the system log.</p>

<p>Tigera's (<strong><em>disclaimer:</em></strong> I work for Tigera) commercial product, CNX, which is built on Calico offers additional auditing and compliance features so you might want to check that out.</p>
