tetragon

1
apiVersion: cilium.io/v1alpha1
2
kind: TracingPolicy
3
metadata:
4
  name: "all-syscalls-for-kill"
5
spec:
6
  lists:
7
  - name: "all-syscalls"
8
    type: "generated_syscalls"
9
  kprobes:
10
  - call: "list:all-syscalls"
11
    selectors:
12
    - matchBinaries:
13
      - operator: "In"
14
        values:
15
        - "/usr/bin/kill"
16