- Home
- eBPF Observability Tools
- Inspektor Gadget
Inspektor Gadget
What it is
Inspektor Gadget is an open-source toolkit and framework for collecting eBPF data and inspecting Kubernetes clusters and Linux hosts. Its gadgets package eBPF programs as OCI images that can be deployed to examine systems. The toolkit enriches low-level kernel data with context such as Kubernetes pod and container names, and can export collected information to observability tools. WebAssembly modules can post-process data and customize operators; developers can also use the framework through a Go library. On Kubernetes, it runs as a DaemonSet with one pod per cluster node. Project gadgets require Linux kernel 5.10 or later with BTF enabled. Supported Kubernetes environments include Minikube, AKS, EKS, GKS, OpenShift, and Talos, while AWS Fargate, Azure Container Instances, and GKE Autopilot are listed as unsupported. Official image-based gadgets are signed with cosign, and operators can restrict which gadgets may run by digest, tag, or image prefix. The project has no long-term support releases: only the latest release receives maintenance and security updates.
For and against
For
- Adds pod and container context to kernel data
- Exports collected data to observability tools
- Supports operator customization through WebAssembly
- Official image-based gadgets are cosign-signed
Against
- Project gadgets require Linux kernel 5.10+ with BTF
- AWS Fargate, ACI, and GKE Autopilot are unsupported
- Only the latest release receives maintenance and security updates
The verdict
Inspektor Gadget combines system inspection with Kubernetes context and export options. Check environment support and release maintenance limits before adopting it.
Who it suits
Inspektor Gadget suits operators and developers inspecting Linux hosts or Kubernetes clusters with eBPF-based tools. Users need a Linux kernel 5.10 or later with BTF enabled for project gadgets.
Plans and prices
Inspektor Gadget
Open-source tools and framework · Linux 5.10+ with BTF required for project gadgets
Read 2 Oct 2026 · inspektor-gadget.io
On the record
- Access controls
- Operators can restrict which gadgets may run by digest, tag, or image prefix using the --allowed-gadgets flag.inspektor-gadget.io · read 2 Oct 2026
- Data export
- The project supports collecting and exporting data to observability tools.inspektor-gadget.io · read 2 Oct 2026
- Deployment
- On Kubernetes, Inspektor Gadget is deployed as a DaemonSet, with one pod per cluster node.inspektor-gadget.io · read 2 Oct 2026
- Extensibility
- WebAssembly modules can post-process data and customize operators, and the framework can be used through a Go library.inspektor-gadget.io · read 2 Oct 2026
- Gadgets
- Gadgets package eBPF programs as OCI images that can be deployed and run to inspect systems.inspektor-gadget.io · read 2 Oct 2026
- Kubernetes awareness
- It automatically enriches low-level kernel data with higher-level information such as Kubernetes pods and container names.inspektor-gadget.io · read 2 Oct 2026
- Kubernetes support
- The requirements page lists Minikube, AKS, EKS, GKS, OpenShift, and Talos as supported platforms.inspektor-gadget.io · read 2 Oct 2026
- Linux requirement
- Gadgets developed by the project require Linux kernel 5.10 or later with BTF enabled.inspektor-gadget.io · read 2 Oct 2026
- Project status
- Inspektor Gadget identifies itself as a Cloud Native Computing Foundation Sandbox Project.inspektor-gadget.io · read 2 Oct 2026
- Purpose
- Inspektor Gadget is a set of tools and a framework for eBPF-based data collection and system inspection on Kubernetes clusters and Linux hosts.inspektor-gadget.io · read 2 Oct 2026
- Security
- Official image-based gadgets are signed with cosign, and the documentation describes verifying gadget signatures.inspektor-gadget.io · read 2 Oct 2026
- Security updates
- The project says it has no long-term support releases and that only the latest release receives security updates and maintenance.inspektor-gadget.io · read 2 Oct 2026
- Unsupported environments
- The requirements page marks AWS Fargate, Azure Container Instances, and GKE Autopilot as unsupported.inspektor-gadget.io · read 2 Oct 2026
