eBPF-based, Kubernetes-native: Observability & Security with Tetragon - Anna Kapuścińska // TechSpot

The promise of no instrumentation, low overhead and full visibility drive wide adoption of eBPF in observability and security space. At the same time, the cloud native ecosystem takes over the world and standardizes how we deploy and operate applications. How to connect these two worlds?
Enter Tetragon ☘ - an eBPF-based, Kubernetes-native observability and security tool. Tetragon is low level in nature, but thanks to eBPF and integrations with common cloud native tools, it can serve high level use cases.
In this talk, we will explore a few use cases - process lifecycle, network visibility, file operations - as well as probe into the Tetragon eBPF internals. Anna will summarize the journey the Tetragon team has been so far, the learnings and plans for the future. Finally, she will give the audience pointers to get started and experiment with Tetragon in their clusters.
🤓 Speaker: Anna Kapuścińska, Site Reliability Engineer from Isovalent at Cisco.
✌️Timecodes
00:07 - 01:13 Intro
01:16 - 02:27 Tetragon overview
02:36 - 04:07 How Isovalent's platform adds advanced features to Tetragon & its use cases
04:14 - 09:35 Technical details and reliability
09:35 - 13:25 Tetragon agent and integrations
13:31 - 19:19 Lessons learned and performance
19:20 - 25:00 Security and enforcement
25:05 - 32:38 Tetragon configuration and policies
32:46 - 39:03 Event processing and metrics
39:04 - 45:51 Use cases and dashboards
45:54 - 48:35 Resources
___
🌟TechSpot Meetups in Warsaw techspot.onthe...
📌 Organizer of the meetup - On The Spot Development.
◾️About the company onthespotdev.com
◾️Vacancies join.onthespot...
◾️LinkedIn / on-the-spot-dev
◾️Telegram channel t.me/onthespotjob
#eBPF #kubernetes #observability #security #tetragon #techspot