docs: Add ancestors and ancestor filter information

Add information about ancestors, ancestor filter and ancestors related metrics to documentation. Signed-off-by: t0x01 <[email protected]>
cilium · Sep 19, 2024 · e2e9ea1 · e2e9ea1
1 parent 5f4dd5a
commit e2e9ea1
Show file tree

Hide file tree

Showing 6 changed files with 19 additions and 5 deletions.
diff --git a/api/v1/README.md b/api/v1/README.md
diff --git a/docs/content/en/docs/concepts/events.md b/docs/content/en/docs/concepts/events.md
@@ -162,6 +162,7 @@ flags, or environment variables.
 | `policy_names` | Filter events by tracing policy names. |
 | `capabilities` | Filter events by Linux process capability. |
 | `parent_binary_regex` | Filter process events by a list of regular expressions of parent process binary names (e.g. `"^/home/kubernetes/bin/kubelet$"`). You can find the full syntax [here](https://github.com/google/re2/wiki/Syntax). | 
+| `ancestor_binary_regex` | Filter process events by a list of regular expressions of ancestor processes' binary names (e.g. `"^/home/kubernetes/bin/kubelet$"`). You can find the full syntax [here](https://github.com/google/re2/wiki/Syntax). | 
 
 #### Field Filtering 
 

diff --git a/docs/content/en/docs/reference/grpc-api.md b/docs/content/en/docs/reference/grpc-api.md
diff --git a/docs/content/en/docs/reference/metrics.md b/docs/content/en/docs/reference/metrics.md
diff --git a/docs/data/tetragon_flags.yaml b/docs/data/tetragon_flags.yaml
diff --git a/examples/configuration/tetragon.yaml b/examples/configuration/tetragon.yaml
@@ -16,7 +16,7 @@ debug: false
 disable-kprobe-multi: false
 enable-export-aggregation: false
 enable-k8s-api: false
-enable-process-ancestors: true
+enable-process-ancestors: false
 enable-process-cred: false
 enable-process-ns: false
 event-queue-size: 10000