Red Hat OpenShift Pipelines vs Tetragon

Red Hat OpenShift Pipelines automates application delivery on Red Hat OpenShift using a cloud-native CI/CD system built on Tekton. Pipelines are defined with Kubernetes resources and standard Tekton custom resource definitions, supporting portable pipeline definitions. Runs execute with their dependencies in isolated containers and can scale on demand, a fit for decentralized teams working with microservice-based architectures. The OpenShift Developer console can create Tekton resources, show run logs and manage pipelines in namespaces. Documented image-building tools include Source-to-Image, Buildah, Buildpacks and Kaniko. Red Hat lists integrations with Tekton Pipelines, Tekton Triggers, Tekton Chains, Tekton Results and OpenShift GitOps. Pipelines as Code supports versioned, auditable workflows aligned with GitOps practices. Red Hat describes hardened security and a Trusted Supply Chain framework intended to help ensure integrity and conform with SLSA levels. The product is available with a Red Hat OpenShift subscription and included in OpenShift Container Platform. The documented CI/CD system runs on OpenShift Container Platform. Pricing is on request; the Developer Sandbox offers a 30-day trial.

Tetragon is a Kubernetes-aware security observability and runtime enforcement tool for Linux, container, and Kubernetes workloads. It uses eBPF to monitor activity, filter events, and enforce policies in the kernel in real time. Process reports can include executed binaries, command-line arguments, user IDs, parent processes, and start times. Tetragon also monitors file access and changes, and can block unauthorized file operations at the kernel level. Kubernetes policies can filter activity by namespace, pod labels, and container fields, with support for containerd and CRI-O. Network visibility ties events to processes and workloads and tracks connections, socket lifecycle, and bytes sent or received. The tool also monitors credential changes, kernel module activity, and eBPF program loads and interactions. Findings are available as JSON logs or through gRPC. Installation options include Helm on Kubernetes, released Linux packages, and a container image. Tetragon is a Cilium sub-project and a CNCF project, and is available as an open-source project with no paid plans listed.