Building Your Own Kubectl Trace on Steroids Using BPF Libraries in Go, Rust, Python an...
summary
A Kubernetes tracer that watches file opens and reports process, pid, uid and result gets built end-to-end: a kubectl plugin installs a daemonset which loads eBPF tracepoint programs, uses a temporary map plus a ring buffer to emit events, and decodes events in user space. Code shows C and Go using libbpfgo / bpf2go (and notes Python bcc/pyebpf and Rust aya/libbpf-rs options), embeds compiled BPF bytecode, and demo logs file access successfully.
AI-written summary · about
chapters (7)
- 0:00Introduction to eBPF
- 2:04eBPF fundamentals
- 4:20Tracing strategies
- 6:24Tooling and libraries
- 13:32Kubernetes integration
- 16:20Running tracers in K8s
- 20:15Code walk-through
related talks
28mBpftrace Meets Pixie: Dynamic Monitoring of K8s Clusters Unleashed
26mProfiling Mastery: Decode Your Data and Elevate Observability
24mWhy Does Continuous Profiling Matter to Developers?
36mKubectl Plugins 101
28mBPF Verifier Visualizer
30mStreamlined Troubleshooting in Kubernetes
19mDiscovering the Untold User Stories of Kubernetes With Applied Anthropology
28mThe Building Blocks of DX: K8s Evolution From CLI to GitOps