Inspektor Gadget
inspektor-gadget.io
What it is
Inspektor Gadget is an open-source toolkit and framework for collecting eBPF data and inspecting Kubernetes clusters and Linux hosts. Its gadgets package eBPF programs as OCI images that can be deployed to examine systems. The toolkit enriches low-level kernel data with context such as Kubernetes pod and container names, and can export collected information to observability tools. WebAssembly modules can process data and customize operators; developers can also use the framework through a Go library. In Kubernetes, it runs as a DaemonSet, with one pod on each cluster node. Project gadgets require Linux kernel 5.10 or later with BTF enabled. Supported Kubernetes environments include Minikube, AKS, EKS, GKS, OpenShift, and Talos; AWS Fargate, Azure Container Instances, and GKE Autopilot are listed as unsupported. Official image-based gadgets are signed, and operators can restrict which gadgets may run by digest, tag, or image prefix. Inspektor Gadget has no long-term support releases: only the latest release receives maintenance and security updates.
Spec sheet
- Purpose
- Inspektor Gadget is a set of tools and a framework for eBPF-based data collection and system inspection on Kubernetes clusters and Linux hosts.Read 2 Oct 2026 · inspektor-gadget.io
- Deployment
- On Kubernetes, Inspektor Gadget is deployed as a DaemonSet, with one pod per cluster node.Read 2 Oct 2026 · inspektor-gadget.io
- Security
- Official image-based gadgets are signed with cosign, and the documentation describes verifying gadget signatures.Read 2 Oct 2026 · inspektor-gadget.io
- Access controls
- Operators can restrict which gadgets may run by digest, tag, or image prefix using the --allowed-gadgets flag.Read 2 Oct 2026 · inspektor-gadget.io
- Data export
- The project supports collecting and exporting data to observability tools.Read 2 Oct 2026 · inspektor-gadget.io
- Extensibility
- WebAssembly modules can post-process data and customize operators, and the framework can be used through a Go library.Read 2 Oct 2026 · inspektor-gadget.io
- Gadgets
- Gadgets package eBPF programs as OCI images that can be deployed and run to inspect systems.Read 2 Oct 2026 · inspektor-gadget.io
- Kubernetes awareness
- It automatically enriches low-level kernel data with higher-level information such as Kubernetes pods and container names.Read 2 Oct 2026 · inspektor-gadget.io
- Kubernetes support
- The requirements page lists Minikube, AKS, EKS, GKS, OpenShift, and Talos as supported platforms.Read 2 Oct 2026 · inspektor-gadget.io
- Linux requirement
- Gadgets developed by the project require Linux kernel 5.10 or later with BTF enabled.Read 2 Oct 2026 · inspektor-gadget.io
- Project status
- Inspektor Gadget identifies itself as a Cloud Native Computing Foundation Sandbox Project.Read 2 Oct 2026 · inspektor-gadget.io
- Security updates
- The project says it has no long-term support releases and that only the latest release receives security updates and maintenance.Read 2 Oct 2026 · inspektor-gadget.io
- Unsupported environments
- The requirements page marks AWS Fargate, Azure Container Instances, and GKE Autopilot as unsupported.Read 2 Oct 2026 · inspektor-gadget.io
Plans and prices
Strong points and limits
Strong points
- Adds pod and container context to kernel data.
- Exports collected data to observability tools.
- Supports WebAssembly processing and a Go library.
- Official image-based gadgets are signed.
- Available as open-source tools and framework.
Limits
- Project gadgets require Linux kernel 5.10 or later with BTF.
- AWS Fargate, Azure Container Instances, and GKE Autopilot are unsupported.
- Only the latest release receives maintenance and security updates.
Who it suits
Inspektor Gadget suits operators and developers inspecting Linux hosts or Kubernetes clusters with eBPF-based tools. It may also fit teams that want to enrich kernel data with Kubernetes context or export results to observability tools.
Verdict
Inspektor Gadget provides eBPF-based inspection with Kubernetes context and export options. Its kernel requirement, unsupported environments, and latest-release-only maintenance policy are important operational constraints.
Where Specifiction places it
- eBPF Observability Tools#13 of 297.9