Add option to tetra to filter on event types

[darox]

This commit adds the ability to filter on the event types.

Implement the ability to filter on event types in the getevents CLI.

[darox]

Go tests fail but locally they're passing:

ok      github.com/cilium/tetragon/cmd/tetra/getevents  0.025s

Tests locally also fail when running with:

go test -p 1 -parallel 1  -gcflags= -timeout 40m -failfast -cover ./pkg/... ./cmd/... ./operator/... 

Running tests with:

go test -p 1 -parallel 1  -cover ./pkg/... ./cmd/... ./operator/...

The following also works:

go test -p 1 -parallel 1  -gcflags=  -cover ./pkg/... ./cmd/... ./operator/...

This as well:

go test -p 1 -parallel 1  -gcflags=  -cover -failfast ./pkg/... ./cmd/... ./operator/... 

It seems that -timeout 40 is the problem

[mtardy]

Hey!! Thanks! I have this in the test right now:

Error: invalid value for "event-types" flag: INEXISTENT. Supported are UNDEF, PROCESS_KPROBE, PROCESS_TRACEPOINT, PROCESS_UPROBE, TEST, RATE_LIMIT_INFO, PROCESS_EXEC, PROCESS_EXIT, PROCESS_LOADER
Usage:
  getevents [flags]

Flags:
      --color string             Colorize compact output. auto, always, or never (default "auto")
  -e, --event-types strings      Include only events of given types
  -F, --exclude-fields strings   Exclude fields from events
  -h, --help                     help for getevents
      --host                     Get host events
  -f, --include-fields strings   Include only fields in events
  -n, --namespaces strings       Get events by Kubernetes namespaces
  -o, --output string            Output format. json or compact (default "json")
      --pods strings             Get events by pods name regex
      --processes strings        Get events by processes name regex
      --timestamps               Include timestamps in compact output
  -t, --tty-encode string        Encode terminal data by file path (all other events will be ignored)

panic: write |1: broken pipe

goroutine 8 [running]:
github.com/cilium/tetragon/pkg/testutils.MockPipedFile.func1()
	/home/runner/work/tetragon/tetragon/go/src/github.com/cilium/tetragon/pkg/testutils/cmd.go:153 +0xe5
created by github.com/cilium/tetragon/pkg/testutils.MockPipedFile in goroutine 7
	/home/runner/work/tetragon/tetragon/go/src/github.com/cilium/tetragon/pkg/testutils/cmd.go:147 +0xf7
FAIL	github.com/cilium/tetragon/cmd/tetra/getevents	0.025s

So I guess there may be an issue on how the one supposed to fail/do nothing is written or return.

[darox]

I did some more testing, and apparently, it's a flake. Because sometimes it works even with:

go test -p 1 -parallel 1  -gcflags= -timeout 40m -failfast -cover ./pkg/... ./cmd/... ./operator/...

Result

ok      github.com/cilium/tetragon/cmd/tetra/getevents  0.023s  coverage: 78.6% of statements

[mtardy]

This should fix your test case failing! :) And a small comment.

[netlify]

✅ Deploy Preview for tetragon ready!

Name	Link
🔨 Latest commit	835e206
🔍 Latest deploy log	https://app.netlify.com/sites/tetragon/deploys/651eb6eeac46bf00089953a4
😎 Deploy Preview	https://deploy-preview-1549--tetragon.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[mtardy]

Could you squash your commit into the first one? :) thanks!!

take this opportunity to also start the commit message with cmd/tetra: ....

[darox]

Could you squash your commit into the first one? :) thanks!!

take this opportunity to also start the commit message with cmd/tetra: ....

done

[mtardy]

Thanks a lot for taking the time to implement that! :) 🎉 🌮

I'll let @willfindlay approve/merge.

[darox]

Thanks a lot for taking the time to implement that! :) 🎉 🌮

I'll let @willfindlay approve/merge.

No problem. It was a pleasure to work on the first PR for tetragon.