Tetragon

https://tetragon.cilium.io/docs

Admin

Tetragon is a flexible Kubernetes-aware security observability and runtime enforcement tool that...

Tokens:1,036

Snippets:28

Trust Score:9.8

Update:3 months ago

Show doc for...

Tokens:

Raw

### Install Tetragon on Linux using Packages

Source: https://tetragon.cilium.io

Install Tetragon on a Linux system by downloading a release tarball, extracting it, running the installation script, and checking the service status. This method is for direct installation on a Linux host.

```bash
curl -LO https://github.com/cilium/tetragon/releases/download/v1.7.0/tetragon-v1.7.0-amd64.tar.gz
tar -xvf tetragon-v1.7.0-amd64.tar.gz
cd tetragon-v1.7.0-amd64/
sudo ./install.sh
sudo systemctl status tetragon
```

--------------------------------

### Install Tetragon on Kubernetes using Helm

Source: https://tetragon.cilium.io

Install Tetragon on a Kubernetes cluster using the Cilium Helm chart. This command adds the Helm repository, updates it, installs Tetragon in the kube-system namespace, and waits for the deployment to complete.

```bash
helm repo add cilium https://helm.cilium.io
helm repo update
helm install tetragon cilium/tetragon -n kube-system
kubectl rollout status -n kube-system ds/tetragon -w
```

--------------------------------

### Deploy Tetragon as a Container using Docker

Source: https://tetragon.cilium.io

Run Tetragon as a Docker container. This command mounts necessary host directories and uses privileged mode to allow Tetragon to monitor system activity. Ensure the correct image tag is used.

```bash
docker run --name tetragon --rm -d
--pid=host --cgroupns=host --privileged
-v /sys/kernel/btf/vmlinux:/var/lib/tetragon/btf
quay.io/cilium/tetragon:v1.7.0
```

Tokens:

Raw