Anna Kapuścińska

Improve Helm chart developer experience

1

The current state of the Helm chart devexp is the following: * [install/kubernetes/test.sh](https://github.com/cilium/tetragon/blob/7c7cb636d23b7c35cdff30940e3f16f01a64d25b/install/kubernetes/test.sh) script updates the Helm chart dependencies, validates it, and generates the values reference (chart README & docs...

Fix monitoring BPF maps

3

Tetragon exposes metrics about BPF maps, defined in the [mapmetrics package](https://github.com/cilium/tetragon/tree/main/pkg/metrics/mapmetrics). There are a few issues with them: * [ ] Map capacity is exposed as [total](https://github.com/cilium/tetragon/blob/3326a78fbb120a9f5946b64733f8786d08be4b0e/pkg/metrics/mapmetrics/mapmetrics.go#L22) label in `tetragon_map_in_use_gauge`...

Hi! Is there a public Google calendar for TGIKs? If there is, it would be helpful to link it here in README. If no, could you create one? Many projects...

There were many changes made recently to improve how Prometheus metrics are defined and managed in Tetragon: * cleanup metrics for deleted pods to prevent growing cardinality: #1279 * labels...

Delete metrics with policy label on policy delete

3

`tetragon_policy_events_total` metric has a `policy` label. When a TracingPolicy is deleted, the corresponding metrics are still exposed by Tetragon, leading to an overhead (usually not big, as policies are not...

This issue collects various places in the codebase where Renovate could help with version bumps if instructed how. - [ ] https://github.com/cilium/tetragon/blob/2f58c9630d18a58950a26ba2fd01ad4afb805639/tests/e2e/flags/flags.go#L29 (updated in #2225) - [ ] https://github.com/cilium/tetragon/blob/2f58c9630d18a58950a26ba2fd01ad4afb805639/tests/e2e/helpers/cluster.go#L50 (updated...

Don't give operator permissions to create CRDs if not needed

2

Tetragon Operator has an option to [skip CRD creation](https://github.com/cilium/tetragon/blob/31117d0596337b6219360ae813ae3c9393991a52/install/kubernetes/tetragon/values.yaml#L233), but even if it's used, the operator ClusterRole still contains [permissions to create CRDs](https://github.com/cilium/tetragon/blob/main/install/kubernetes/tetragon/templates/operator_clusterrole.yaml#L29-L34). For slightly better security hygiene, these permissions...

Currently metrics exposed by Tetragon don't have a label with the node name. `node` label is added by a relabeling in the [default ServiceMonitor](https://github.com/cilium/tetragon/blob/main/install/kubernetes/tetragon/templates/servicemonitor.yaml#L21-L24). This works well enough, however: *...