Talk Deep Dive
summary
eBPF tooling that maps kernel tracepoints to Kubernetes pods by matching mount and PID namespaces actually exists as Inspektor Gadget, providing two streams of gadgets—bcc-compatible probes and custom analyzers—that can record live syscalls and produce actionable artifacts like seccomp advisor profiles and network policy advisor suggestions. Headlamp is a cluster‑agnostic web UI that runs in‑cluster or on desktop, exposes Inspektor Gadget via plugins, and offers one‑click recording, policy generation, and plans for streaming CRD integration.
AI-written summary · about
chapters (4)
related talks
28mDebug Your Clusters with eBPF-Powered Tools
20mDebugging Kubernetes and Container Workloads with the Superpower of eBPF
24mMaking the Kernel Speak Kubernetes: Unlocking eBPF’s Power for Observability
30mInspektor Gadget and traceloop: BPF debugging tools for Kubernetes
30mObservability in Kubernetes: Unlocking the Power of eBPF
40mUsing the EBPF Superpowers To Generate Kubernetes Security Policies
36meBPF for Runtime Security
42mCommunity Driven Breakout Session: eBPF and Auto-Instrumentation