dustin-decker / threatseer

efficient linux security monitoring
Apache License 2.0
25 stars 4 forks source link

resolve container and env vars (pod information) from PID #1

Open dustin-decker opened 6 years ago

dustin-decker commented 6 years ago

For events identified by PID we need to resolve it back to container, pod, and namespace, and any other context passed down that we want to send.

https://kubernetes.io/docs/tasks/inject-data-application/environment-variable-expose-pod-information/ https://stackoverflow.com/questions/24406743/coreos-get-docker-container-name-by-pid