Homelabv4/infrastructure/tetragon/grafana-dashboard.yaml

apiVersion: v1
kind: ConfigMap
metadata:
  name: grafana-dashboard-tetragon
  namespace: grafana
  labels:
    grafana_dashboard: "1"
data:
  tetragon-overview.json: |
    {
      "annotations": { "list": [] },
      "editable": true,
      "fiscalYearStartMonth": 0,
      "graphTooltip": 0,
      "links": [],
      "panels": [
        {
          "title": "Process Exec Events (rate/5m)",
          "type": "timeseries",
          "datasource": { "type": "prometheus", "uid": "Prometheus" },
          "targets": [
            {
              "expr": "sum(rate(tetragon_events_total{type=\"PROCESS_EXEC\"}[5m])) by (namespace)",
              "legendFormat": "{{namespace}}"
            }
          ],
          "gridPos": { "h": 8, "w": 12, "x": 0, "y": 0 }
        },
        {
          "title": "Network Connections (rate/5m)",
          "type": "timeseries",
          "datasource": { "type": "prometheus", "uid": "Prometheus" },
          "targets": [
            {
              "expr": "sum(rate(tetragon_events_total{type=\"PROCESS_KPROBE\"}[5m])) by (namespace)",
              "legendFormat": "{{namespace}}"
            }
          ],
          "gridPos": { "h": 8, "w": 12, "x": 12, "y": 0 }
        },
        {
          "title": "Policy Events by Type",
          "type": "piechart",
          "datasource": { "type": "prometheus", "uid": "Prometheus" },
          "targets": [
            {
              "expr": "sum(tetragon_events_total) by (type)",
              "legendFormat": "{{type}}"
            }
          ],
          "gridPos": { "h": 8, "w": 8, "x": 0, "y": 8 }
        },
        {
          "title": "Tracing Policy Matches",
          "type": "stat",
          "datasource": { "type": "prometheus", "uid": "Prometheus" },
          "targets": [
            {
              "expr": "sum(tetragon_events_total{type=~\"PROCESS_KPROBE|PROCESS_TRACEPOINT\"})",
              "legendFormat": "Total Policy Events"
            }
          ],
          "gridPos": { "h": 8, "w": 8, "x": 8, "y": 8 }
        },
        {
          "title": "Events by Namespace",
          "type": "bargauge",
          "datasource": { "type": "prometheus", "uid": "Prometheus" },
          "targets": [
            {
              "expr": "sum(rate(tetragon_events_total[5m])) by (namespace) > 0",
              "legendFormat": "{{namespace}}"
            }
          ],
          "gridPos": { "h": 8, "w": 8, "x": 16, "y": 8 }
        }
      ],
      "schemaVersion": 39,
      "tags": ["tetragon", "security", "zero-trust"],
      "templating": { "list": [] },
      "time": { "from": "now-1h", "to": "now" },
      "title": "Tetragon Runtime Security",
      "uid": "tetragon-overview"
    }