A (re)introduction of Inspektor Gadget: A Containerized Framework for eBPF Systems Inspection
11-04, 11:25–11:55 (US/Central), ROOM 1

Inspektor Gadget is a newly accepted CNCF Sandbox project that has evolved from being a tool for gathering system data using eBPF programs into a containerized framework for building custom eBPF system inspection pipelines.

This talk will guide attendees through the process of creating, packaging and distributing 'Gadgets' (eBPF programs/scripts + metadata in OCI images), using existing Gadgets and leveraging Inspektor Gadget's framework to collect, enrich (map Linux to Kubernetes resources), and export data via Prometheus or expose it via an API, and visualizing data; all based on a simple config file.

The transition of Inspektor Gadget from being a tool to a framework opens a multitude of opportunities. It paves the way for many existing and future projects that follow the pattern of gathering and exporting eBPF data to be implemented via a simple configuration file. This talk provides attendees with the knowledge to fully exploit Inspektor Gadget for these purposes.

Chris works at Microsoft Azure where he works on open source, cloud native Linux projects. He joined Microsoft via the acquisition of Kinvolk where he was founder and CEO. Similar to his focus at Microsoft, Kinvolk specialized in building open source, cloud native Linux projects and products.

Mauricio works as a software engineer at Microsoft. He is interested in eBPF, Kubernetes, networking and low level programming. Mauricio has used eBPF in different scopes like implementing network virtual functions (polycube project), tracing solutions (Inspektor Gadget) and recently implemented a new BPF-based feature in systemd.