tetragon

1
apiVersion: cilium.io/v1alpha1
2
kind: TracingPolicy
3
metadata:
4
  name: "dns"
5
spec:
6
  kprobes:
7
  - call: "fd_install"
8
    syscall: false
9
    args:
10
    - index: 0
11
      type: int
12
    - index: 1
13
      type: "file"
14
    selectors:
15
    - matchArgs:
16
      - index: 1
17
        operator: "Equal"
18
        values:
19
        - "/etc/passwd"
20
      matchActions:
21
      - action: DnsLookup
22
        argFqdn: ebpf.io
23