Inspektor Gadget

    Inspektor Gadget is a collection of tools (or gadgets) to debug and inspect Kubernetes resources and applications. It manages the packaging, deployment and execution of eBPF programs in a Kubernetes cluster, including many based on BCC tools, as well as some developed specifically for use in Inspektor Gadget. It automatically maps low-level kernel primitives to high-level Kubernetes resources, making it easier and quicker to find the relevant information.

    How does it work?

    Inspektor Gadget is deployed to each node as a DaemonSet. It uses in-kernel eBPF helper programs to monitor events mainly related to syscalls from userspace programs in a pod. The eBPF programs are run by the kernel and gather the log data. Inspektor Gadget’s userspace utilities fetch the log data from ring buffers and display it. What eBPF programs are and how Inspektor Gadget uses them is briefly explained here:

    Getting started

    Installation and running your first gadget.

    Core concepts

    This section describes the core concepts of Inspektor Gadget.

    CR Usage Reference

    Syntax reference for using the Trace custom resource with each gadget.

    Development

    This section provides information for developers.

    Guides

    This section provides an overview of the gadgets included in Inspektor Gadget and guidance on how to use each.

    Built-in gadgets

    This section provides guides for built-in gadgets.

    ig

    Description of the ig tool.

    Reporting security issues

    Instructions to report security issues found in Inspektor Gadget

    Reference documentation

    This section provides reference documentation defining different interfaces.

    Edit this page File documentation issue