homelab-gitops/platform/tetragon/policies/example.yaml
gwg313 8d74a625bc
update
Signed-off-by: gwg313 <gwg313@pm.me>
2026-05-17 14:29:03 -04:00

21 lines
379 B
YAML

apiVersion: cilium.io/v1alpha1
kind: TracingPolicy
metadata:
name: "fd-install"
spec:
kprobes:
- call: "fd_install"
syscall: false
args:
- index: 0
type: "int"
- index: 1
type: "file"
selectors:
- matchArgs:
- index: 1
operator: "Equal"
values:
- "/tmp/tetragon"
matchActions:
- action: Sigkill