cilium / tetragon

eBPF-based Security Observability and Runtime Enforcement

https://tetragon.io

cilium/tetragon Issues

`tetra getevents` filtering with --pods returns no pod
Closed 10 days ago1
LSM `security_path_*` deletion kprobes can't resolve target dentry name
Closed 14 days ago2
New `TestPolicyListingWhileLoadUnload` introduces a flake
Updated 14 days ago
Cannot track users attempting to follow symlinks outside of a directory root
Updated 14 days ago
v1.1.2 release
Updated 20 days ago
Dynamic log level change doesn't work the same for all environments
Updated 20 days ago
TestDemoApp failure
Updated 20 days ago
v1.1.1 release
Closed 20 days ago1
sensor manager: allow concurrent listing with loading.
Closed 21 days ago
Update code generation scripts with k8s v1.30 libraries
Updated 21 days ago1
Documentation: broken links automatic report
Closed 22 days ago
update docs to use NotifyEnforcer
Updated 25 days ago1
Using rateLimit on tcp_connect calls doesn't have any effect
Updated a month ago2
Documentation: broken links automatic report
Closed a month ago4
Tetragon does not allow getting healthcheck and non healthcheck events at the same time
Updated a month ago
gRPC server can't be disabled
Updated a month ago
metrics: add tags support
Updated a month ago2
policyfilter test failure on bpf-next
Updated a month ago
field-filters: filter message and tags fields
Updated a month ago
Creating a TracingPolicyNamespaced with the same name for a different namespace does not get applied.
Closed a month ago14
Tetragon based file integrity monitoring (FIM)
Updated a month ago7
BTF: fix validation warnings
Closed a month ago
I think that we currently cannot have a TracingPolicy and a TracingPolicyNamespaced with the same name.
Closed a month ago
Tetragon is not showing process exec ancestors
Updated a month ago1
Tetragon Go Test failing on actuated-arm64-4cpu-8gb: github.com/cilium/tetragon/pkg/sensors/tracing: TestTraceKernelModule
Closed 2 months ago1
Tetragon with ociHookSetup.enabled cannot start in a namespace other than kube-system
Closed 2 months ago
Enable users to add namespace exceptions in case OCI hook fails
Closed 2 months ago
Documentation: broken links automatic report
Closed 2 months ago1
Could not find Cgroup RKE2 Kubernetes cluster
Closed 2 months ago3
tetragon: better identification of kernel threads
Updated 2 months ago
Documentation: broken links automatic report
Closed 2 months ago1
v1.1.0 release
Closed 2 months ago
Improve metrics library to enforce best practices
Updated 2 months ago
Delete metrics with policy label on policy delete
Updated 2 months ago3
docs(Advanced Process execution): `/bin/busybox` is not executed by `id`
Updated 2 months ago4
docs: demo application `xwing` doesn't have `vi`
Closed 2 months ago1
K8s Spec Mistmatch for uprobes
Closed 2 months ago2
Run multi-kernel Go tests (vmtests) on arm64
Updated 2 months ago
Problems running gRPC server, misteriously led to failure attaching `event_exit_acct_process` on latest version
Closed 2 months ago5
TracingPolicies do not get applied in WSL2
Updated 2 months ago3
Filter out bash kubernetes healthchecks
Closed 3 months ago
ci: CRD version check fails on PRs from forks
Closed 3 months ago1
v1.0.3 release
Closed 3 months ago2
The wrong version was released in v1.0.2
Closed 3 months ago4
docs: Deploy demo application has issue on an ARM environment
Closed 3 months ago
docs: contribution-guide's docker run is broken
Closed 3 months ago1
Documentation: broken links automatic report
Closed 3 months ago1
Local built image does not work as expected on MacOS arm64
Closed 3 months ago1
doc: document why Tetragon will fail to load its BPF programs with operation not permitted
Updated 3 months ago
May I ask how to exclude the monitoring of some common command processes, such as ls, ssh, grep, which do not record logs
Closed 3 months ago3