Making the Kernel Speak Kubernetes: Unlocking eBPF’s Power for Observability

on YouTube ↗24m

" summary

Kernel-level observability via eBPF runs as a verified bytecode runtime that attaches to syscalls and kernel functions and exports data through eBPF maps; Inspektor Gadget manages those programs, correlates events with Kubernetes pods/namespaces by calling the API server or container runtimes, and ships metrics to Prometheus/Grafana via OTLP/gRPC. Gadgets are compiled, packaged as OCI-packed gadgets, pushed to registries, and deployed (daemonset or ad hoc). Base agent is about 90 MB, per-gadget overhead typically 1–10 MB.

AI-written summary · about

" chapters (11)

1. 0:00Introduction
2. 0:26What is eBPF
3. 3:15eBPF for observability
4. 5:23Introducing Inspector Gadget
5. 7:28Why eBPF is powerful
6. 9:14Available gadgets
7. 10:38Demo: Deploying gadgets
8. 14:14Building custom gadgets
9. 16:41eBPF development simplified
10. 19:52Deploying custom gadgets
11. 20:36Resources and Q&A

" related talks

• 30mObservability in Kubernetes: Unlocking the Power of eBPFAlejandro Mercado · Conf42 Kube Native 2025
• 27mLow-Overhead Tracing Using eBPF for Observability into Kubernetes Apps and ServicesGaurav Gupta · KubeCon + CloudNativeCon Europe 2018
• 28mBringing the power of eBPF tools to your k8s web UIMarga Manterola, Joaquim Rocha · Cloud Native Rejekts NA 2021
• 31mTrue Kubernetes Observability with eBPFShahar Azulay · Conf42 Cloud Native 2023
• 13mTalk Deep DiveMarga Manterola, Mark Coleman, Joaquim Rocha · Cloud Native Rejekts NA 2021
• 31meBPF for Observability: The Good, the Bad, and the UglyAnna Kapuścińska · Observability Day Europe 2023
• 27mStep By Step Kubernetes Observability with eBPFRinor Maloku · DevOpsDays Portugal 2022
• 35mAn Introduction to eBPF - Superpowers for Networking, Observability & SecurityLiz Rice · Craft Conference 2021