Tetragon is an eBPF based security observability and runtime enforcement. eBPF is used to safely and efficiently extend the kernel's capabilities without requiring changing the kernel source code or loading kernel modules. Tetragon is a Cilium community open-source project that enables profound visibility with filtering and aggregation with the eBPF collector support to deliver visibility at depth with minimal overhead.
Palette supports Cilium Tetragon as an add-on pack for monitoring services. Refer to the create cluster profile page for more information on how to use an add-on pack.