Tetragon Playground 🐝🛡️

A bit unconventional way to start some Tetragon fun with docker compose, no kubernete or helm needed.

Getting starts

TCP connection policy example

• log tcp event with policies/connect.yaml
• parse into csv with log_parser/tcp_connection.py

Adjusting custom configuration file

file: ./my_tetragon_config.yaml

find more info on Daemon configuration

Docker compose way

sudo docker compose -f docker-compose.yaml up -d

Inspect the Tetragon container

sudo docker exec -it tetragon-container bash

View events

sudo docker exec tetragon-container tetra getevents -o compact