Inspecting your Kubernetes cluster with eBPF and Inspektor Gadget
Kubernetes is the de-facto container orchestration system. However debugging Kubernetes in production environment, is not straightfoward. That’s where the power of eBPF and Inspektor Gadget comes in, which allows to do real time, in-cluster debugging to find out root cause of an issue.
Inspektor Gadget leverages eBPF to instrument the Linux kernel dynamically, exposing valuable insights about what’s really happening inside Kubernetes cluster — all in real time and without requiring to install any sort of agent. In this talk, we will explore how we can use different gadgets from the Inspektor Gadget toolkit to find out things like:
TCP connections made by a pod
DNS requests
syscalls
traceloop - a flight recorder for syscalls
and others
This will be a practical talk, starting with an introduction of eBPF and going into the Inspektor Gadget suite. We will see different gadgets in action, and at the end, audience will be able to understand how to make their lives easier by using Inspektor Gadget to debug when there is a difficult problem. We will also learn how to capture the output in a much more user friendly manner, for parsing them later.
