get_egress_destinations
Identify a pod's outbound destinations to detect data exfiltration and unexpected dependencies, classifying traffic as cluster-internal, private, public internet, or cloud metadata.
Instructions
[probe] Where a pod currently talks to, classified (cluster service/pod, private, PUBLIC INTERNET, cloud metadata). Exfil and unexpected-dependency signal.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pod | No | Exact pod name (alternative to service) | |
| service | No | Workload name as you would say it: a Deployment, StatefulSet, DaemonSet, Service, or Pod name | |
| namespace | No | Kubernetes namespace (required: no default configured; see list_namespaces) |