Skip to content

feat: add direct stdout export mode - #5103

Draft
irozzo-1A wants to merge 2 commits into
cilium:mainfrom
irozzo-1A:feat/direct-stdout-export-1710
Draft

feat: add direct stdout export mode#5103
irozzo-1A wants to merge 2 commits into
cilium:mainfrom
irozzo-1A:feat/direct-stdout-export-1710

Conversation

@irozzo-1A

Copy link
Copy Markdown
Contributor

Fixes #1710

Description

Add a new --export-stdout flag that writes JSON events directly to the Tetragon agent's stdout instead of a file. In Kubernetes, this is exposed as export.mode: direct-stdout in the Helm chart, which removes the need for a sidecar container and an export-logs host volume.
When active, agent logs are automatically redirected to stderr to avoid interleaving with the event stream. The flag is mutually exclusive with --export-filename and --export-file-rotation-interval. The existing stdout (sidecar-based) mode remains the Helm default for now.

Changelog

Add a new `--export-stdout` flag that writes JSON events directly to the Tetragon agent's stdout instead of a file. In Kubernetes, this is exposed as `export.mode: direct-stdout` in the Helm chart, which removes the need for a sidecar container and an export-logs host volume.
When active, agent logs are automatically redirected to stderr to avoid interleaving with the event stream. The flag is mutually exclusive with `--export-filename` and `--export-file-rotation-interval`. The existing `stdout` (sidecar-based) mode remains the Helm default for now.

irozzo-1A added 2 commits June 4, 2026 10:54
Add a new --export-stdout flag that enables the tetragon agent to write JSON
events directly to its stdout, bypassing file-based export and the sidecar
container. This reduces operational complexity for users who prefer inline
event logs.
Note that when this option is enabled the normal logs are directed to
stderr to avoid interleaving with the stream of events.

Signed-off-by: irozzo-1A <iacopo@sysdig.com>
Add a new export.mode value "direct-stdout" that writes events directly
to the tetragon container stdout without a sidecar or host volume.
The existing "stdout" mode (sidecar-based file export) remains the
default.

Signed-off-by: irozzo-1A <iacopo@sysdig.com>
@netlify

netlify Bot commented Jun 4, 2026

Copy link
Copy Markdown

Deploy Preview for tetragon ready!

Name Link
🔨 Latest commit 7fb0e7f
🔍 Latest deploy log https://app.netlify.com/projects/tetragon/deploys/6a21412308e8eb00088dca2b
😎 Deploy Preview https://deploy-preview-5103--tetragon.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

export: add an option to export events to tetragon container log

1 participant