REQUEST: Request a Learning session for Tetragon #90
Description
Please tell us a bit more about the topic
I would love to present Tetragon to people at SIG security tooling! It's an eBPF-based Security Observability and Runtime Enforcement software. In brief, it allows for process lifecycle observability by default and you can extend its capabilities by writing Kubernetes CRD in YAML (called TracingPolicy) that will be translated to eBPF programs to perform customized observability and enforcement.
I'm not exactly sure from which angle we want to present but I have some ideas :)!
Please share speaker details
Partially unsure.
I think I will present but would love to have someone from the Tetragon team with me.
If speaker is confirmed, please share speaker availability
The next challenge will be to find a nice timeslot for the learning session!
Explain the benefits to the community that this session provides
The community would benefit from learning about this new open-source tool that solves security observability and enforcement problem. People are starting to realize that a lot of their security needs can be addressed with eBPF-powered software, but may not know how to get started. Introducing attendees to Tetragon and its TracingPolicy gives them an opportunity to get a bit familiar with eBPF security coming straight from the kernel through things they already know like Kubernetes custom resources. In addition, it will introduce them to some kernel concepts that they will need to understand for security, like syscalls, tracepoints, kprobes, etc, and how to leverage them in the context of Kubernetes clusters.
See you SIG security people!! 👋