Caretta vs Inspektor Gadget

Caretta is a free, self-hosted Kubernetes tool from groundcover that creates a visual map of services and their network interactions. It uses eBPF for collection and is designed for Linux systems with kernel 4.16 or later and CO-RE support. The project describes a minimal footprint and says no cluster modifications are required. Installation is documented through a Helm chart, with a recommendation to use a new, unique namespace. The chart includes Grafana with a predefined Caretta dashboard and VictoriaMetrics for collecting and publishing metrics that Prometheus-compatible dashboards can consume. Both bundled services are enabled by default, as is a five-second metrics polling interval, while Helm values can disable either component. Persistent storage for VictoriaMetrics starts disabled but can be enabled. Grafana’s default setup enables anonymous mode and includes administrator credentials in the README. Caretta is self-hosted, Apache-2.0 licensed, and support is directed through Slack or repository issues.

Inspektor Gadget is an open-source toolkit and framework for collecting eBPF data and inspecting Kubernetes clusters and Linux hosts. Its gadgets package eBPF programs as OCI images that can be deployed to examine systems. The toolkit enriches low-level kernel data with context such as Kubernetes pod and container names, and can export collected information to observability tools. WebAssembly modules can process data and customize operators; developers can also use the framework through a Go library. In Kubernetes, it runs as a DaemonSet, with one pod on each cluster node. Project gadgets require Linux kernel 5.10 or later with BTF enabled. Supported Kubernetes environments include Minikube, AKS, EKS, GKS, OpenShift, and Talos; AWS Fargate, Azure Container Instances, and GKE Autopilot are listed as unsupported. Official image-based gadgets are signed, and operators can restrict which gadgets may run by digest, tag, or image prefix. Inspektor Gadget has no long-term support releases: only the latest release receives maintenance and security updates.