Hacker News Reader

You should split your controller - it is running in both the control and data planes. Idea is good though, wish you luck.

View on HN

Thank you! Not really, the controller is not doing dataplane per-say, it only pushes eBPF programs to the kernel for the relevant apps/cgroups so that could be considered control-plane. The full data-plane run in eBPF.

1. Code that manages the Kubernetes manifests. This doesn’t need to live alongside your actual app.

2. Code that does injection in eBPF and needs to live along your app.

From my understanding from the README and helm chart, these are both in the daemonset.

Actually we have 2 applications along those boundaries you described. a webhook app that manage kubernetes manifest and another to inject the ebpf code and manage the ebpf maps.

Thank you for the feedback though! I think we need to clarify the doc to make that separation clear. I will open an issue for that and we will work on it.

Aiui the controller is only running in the control plane, and the ebpf programs are in the data plane?

yes, that's right!

Reply on news.ycombinator.com