search

inspektor-gadget / inspektor-gadget

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF
https://www.inspektor-gadget.io
Apache License 2.0
2.16k stars 225 forks source link

gadgets: Implement support for advise gadgets as image-based ones #3003

Open mauriciovasquezbernal opened 3 months ago

mauriciovasquezbernal commented 3 months ago

The advise gadgets capture events and suggest different configurations. We should also support them as image-based gadgets.

This support requires two different things:

Some of the gadgets, like advise seccomp-profile, have integrations to directly apply the profile to the cluster: https://github.com/inspektor-gadget/inspektor-gadget/blob/main/docs/builtin-gadgets/advise/seccomp-profile.md#integration-with-kubernetes-security-profiles-operator. Implement this support is difficult and its out of scope for now, the profiles can be printed to the terminal (or to a file) and then the user will apply them.

TODO: We should think about the UX of these gadgets before porting them. Currently they require a start, stop operations, however I'm not sure we want to continue using this approach.

github-actions[bot] commented 1 month ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 14 days if no further activity occurs.