Tag · 3 posts

rust

By Bhawani Singh2026-08-2012 min read

Pod Startup Forensics: Closure and What's Next

Closing the series: what six parts proved, the two scaling questions still untested, and the remaining exec-probe and production-kernel boundaries.

By Bhawani Singh2026-08-167 min read

Pod Startup Forensics 6 / 7

Pod Startup Forensics: Closing the Gap

Correlating socket syscalls and kubelet probe attempts into the merged timeline, then fixing a real cgroup-attribution bug that left most of those events unresolved.

By Bhawani Singh2026-08-056 min read

Pod Startup Forensics 4 / 7

Pod Startup Forensics: The Architecture

How the CLI resolves pod owners and phases, the eBPF tracer captures syscall evidence, and the exporter joins both into a verified startup timeline.