add tetragon policies

Signed-off-by: gwg313 <gwg313@pm.me>
2026-05-28 21:41:46 -04:00 · 2026-05-28 21:41:46 -04:00 · 2671abc98c
commit 2671abc98c
parent baa0216960
8 changed files with 103 additions and 39 deletions
--- a/platform/tetragon/policies/tracingpolicy-privilege-escalation.yaml
+++ b/platform/tetragon/policies/tracingpolicy-privilege-escalation.yaml
@ -0,0 +1,9 @@
+apiVersion: cilium.io/v1alpha1
+kind: TracingPolicy
+metadata:
+  name: detect-privilege-escalation
+spec:
+  kprobes:
+    - call: "commit_creds"
+      syscall: false
+      return: true