Gadget execsnoop

    execsnoop shows new created processes, with container details.

    Example CR

    apiVersion: gadget.kinvolk.io/v1alpha1
    kind: Trace
    metadata:
      name: execsnoop
      namespace: gadget
    spec:
      node: ubuntu-hirsute
      gadget: execsnoop
      runMode: Manual
      outputMode: Stream
      filter:
        namespace: default
    

    Operations

    start

    Start execsnoop gadget

    $ kubectl annotate -n gadget trace/execsnoop \
        gadget.kinvolk.io/operation=start
    

    stop

    Stop execsnoop gadget

    $ kubectl annotate -n gadget trace/execsnoop \
        gadget.kinvolk.io/operation=stop
    

    Output Modes

    • Stream