eBPF Security Monitoring — Du nutzt Kernel-Module für Security Monitoring. Kernel-Panic, dein Cluster ist down. GKE blockiert Kernel-Module. Du bist blind.

# Install Tetragon via Helm
helm repo add cilium https://helm.cilium.io
helm install tetragon cilium/tetragon -n kube-system

# TracingPolicy: alert on shell execution inside containers
apiVersion: cilium.io/v1alpha1
kind: TracingPolicy
metadata:
  name: block-shell-in-containers
spec:
  kprobes:
  - call: "sys_execve"
    syscall: true
    args:
    - index: 0
      type: "string"
    selectors:
    - matchArgs:
      - index: 0
        operator: "Postfix"
        values: ["/sh", "/bash", "/ash", "/dash"]
      matchNamespaces:
      - namespace: Pid
        operator: NotIn
        values: ["host_ns"]   # Container processes only
      matchActions:
      - action: Sigkill        # KILL the process — not just alert
        # or action: Override with argError: -1 for syscall override

# Deploy Falco with eBPF driver (no kernel module required)
helm repo add falcosecurity https://falcosecurity.github.io/charts
helm install falco falcosecurity/falco \
  --set driver.kind=ebpf \
  --set falcosidekick.enabled=true \
  --set falcosidekick.config.webhook.address=http://openclaw-webhook:9000

# Key Falco rules for container security:
- rule: Unexpected shell in container
  condition: >
    spawned_process and container and
    shell_procs and not proc.pname in (allowed_parent_processes)
  output: Shell spawned in container (proc=%proc.name parent=%proc.pname
    container=%container.name image=%container.image.repository)
  priority: WARNING

- rule: Write below /etc in container
  condition: >
    open_write and container and
    fd.name startswith /etc
  output: File below /etc written in container (file=%fd.name
    container=%container.name)
  priority: ERROR

- rule: Outbound connection to unexpected IP
  condition: >
    outbound and container and
    not fd.sip in (allowed_outbound_ips)
  output: Unexpected outbound connection (sip=%fd.sip dport=%fd.sport
    container=%container.name)
  priority: WARNING

# Cilium L7 policy: allow only specific HTTP paths
apiVersion: "cilium.io/v2"
kind: CiliumNetworkPolicy
metadata:
  name: moltbot-agent-l7-policy
  namespace: moltbot-agents
spec:
  endpointSelector:
    matchLabels:
      app: moltbot-agent
  egress:
  - toEndpoints:
    - matchLabels:
        app: llm-gateway
    toPorts:
    - ports:
      - port: "8080"
        protocol: TCP
      rules:
        http:
        - method: "POST"
          path: "/v1/chat/completions"  # Only allow LLM API calls
        # BLOCKED: GET /, POST /admin, all other paths

  - toFQDNs:
    - matchName: "api.openai.com"
    toPorts:
    - ports:
      - port: "443"
        protocol: TCP
      rules:
        http:
        - method: "POST"
          path: "/v1/chat/completions"

  # Block metadata API (cloud credential theft prevention)
  egressDeny:
  - toCIDRSet:
    - cidr: "169.254.169.254/32"

# Tetragon: comprehensive syscall audit with JSON export
apiVersion: cilium.io/v1alpha1
kind: TracingPolicy
metadata:
  name: audit-sensitive-syscalls
spec:
  kprobes:
  - call: "sys_ptrace"      # Process tracing (escape vector)
    syscall: true
    return: true
  - call: "sys_mount"       # Filesystem mount (escape vector)
    syscall: true
    return: true
  - call: "sys_clone"       # Namespace creation (escape vector)
    syscall: true
    args:
    - index: 0
      type: "uint64"  # flags
    return: true
  - call: "sys_setuid"      # Privilege escalation
    syscall: true
    return: true

# Export audit events to SIEM:
# Tetragon exports JSON to stdout → ship via Fluent Bit to SIEM
# Each event includes: timestamp, pod, namespace, process, args, return_val
# Cryptographic integrity: sign log stream with Falco/Tetragon + HMAC