Inspektor Gadget – an eBPF systems inspection tool and framework

Inspektor Gadget (IG) is a CNCF Sandbox project that empowers developers to easily build custom system inspection pipelines to help debug their toughest low level issues with Kubernetes, containers, systemd services, and more. This presentation will introduce attenees to the process of creating, packaging, and distributing 'Gadgets' (OCI images combining eBPF programs, wasm modules, and metadata). We will show how Gadgets and the Inspektor Gadget framework can be used to collect, enrich (map lower-level Linux primitives to higher level concepts), and export data to tools like Prometheus or expose data via an API all based on a simple config file. Inspektor Gadget paves the way for many existing and future projects that follow the pattern of gathering and exporting eBPF data to be implemented easily via a simple configuration file. Through practical examples and use cases, this talk provides attendees with the knowledge to fully leverage Inspektor Gadget for these purposes.