ALT Tracing Policy TracingPolicy is a user-configurable Kubernetes custom resource (CR) that allows users to trace arbitrary events in the kernel and optionally define actions to take on a match, for enforcement for example. Currently, two types of events are supported: kprobes and tracepoints, but others may be added in the future (e.g., uprobes) by following a similar approach. Note that TracingPolicy can be considered low-level since they require knowledge about the Linux kernel and containers to be written correctly. In the future, we are considering to add a high-level RuntimeSecurityPolicy which would take this complexity away. For the complete custom resource definition (CRD) refer to the YAML file cilium.io_tracingpolicies.yaml. One practical way to explore the CRD is to use kubectl explain against a Kubernetes API server on which it is installed, for example kubectl explain tracingpolicy.spec.kprobes provides field-specific documentation and details on kprobe spec. For bare met

ALT bingo card: use iptables or draw 25 the person draws 25