Panel - Klustered: eBPF Edition
Panelat Cloud Native eBPF Day Europe 2022 · on Monday, 2022-05-16· at 16:00· Pavilion 4 | Room A | Level 2 | Central Forum·
summary
Three bare‑metal Kubernetes clusters contain three deliberate breaks and all three get fixed live using Cilium (Hubble), Inspektor Gadget and Sysdig/Falco. Breaks include a hosts file hijack of google.com that blocks an init probe, an eBPF local‑redirect policy that sends Postgres traffic to a fluentd pod, and a container with all capabilities dropped plus a malicious systemd script that resets Postgres credentials. Teams use Cilium/hubble visibility, Inspektor Gadget seccomp tracing and capability advisor, and Falco detecting in‑pod execs to find and repair the clusters successfully.
AI-written summary · about
chapters (4)
- 0:00Start
- 14:33Local Redirect
- 27:32Two of Your Favorite Gadgets That You Use and Why You Like Them
- 37:41Do You Feel that We'Re on the Path to There Being a Secure by Default Rules or Policy That Can Be Deployed to Kubernetes Clusters
related talks
28mDebug Your Clusters with eBPF-Powered Tools
22mTales from an eBPF Program’s Murder Mystery
47mUsing eBPF to Bring Kubernetes-Aware Security to the Linux Kernel
20mDebugging Kubernetes and Container Workloads with the Superpower of eBPF
34mHow Clusters Fail Under Attack and How We Detect It at Runtime with eBPF signals
30mObservability in Kubernetes: Unlocking the Power of eBPF
13mTalk Deep Dive
34mNetwork Observability in Kubernetes with Cilium and Hubble