登录

retina

microsoftMIT活跃维护

基于 eBPF 的 Kubernetes 分布式网络可观测性工具，能实时抓取集群内网络流量、追踪调用链路并定位网络故障。

eBPF distributed networking observability tool for Kubernetes

v1.3.1发布于 2026-10-23 14:20 UTC3,183star309fork同步于 2026-11-10 11:41 UTC
网络可观测性eBPFKubernetes分布式追踪网络监控
对比 GitHub 官网ebpfkubernetesnetworkingobservability

怎么上手

由 README 提炼，执行前请确认
原文 
VERSION=$( curl -sL https://api.github.com/repos/microsoft/retina/releases/latest | jq -r .name)
helm upgrade --install retina oci://ghcr.io/microsoft/retina/charts/retina --version $VERSION --set image.tag=$VERSION --set operator.tag=$VERSION --set logLevel=info --set enabledPlugin_linux="\[dropreason\,packetforward\,linuxutil\,dns\]"
硬件要求按 README 说明

README 未说明显存或 CPU 要求；仅提示在 32 核以上节点高网络负载下使用 packetparser 高级指标可能有性能问题，建议先用 Basic 指标模式。

下载：源码 zip·GitHub Releases（安装包）本站不镜像安装包

项目说明

由 README 自动翻译提炼
没人工点评？写下你的经验

微软开源的 Kubernetes 网络可观测性平台，用 eBPF 采集指标和抓包排查集群网络问题

基于 eBPF 的 Kubernetes 分布式网络可观测性工具，能实时抓取集群内网络流量、追踪调用链路并定位网络故障。

核心能力

  • 基于 eBPF 采集 Kubernetes 工作负载网络遥测
  • 输出 Prometheus 标准指标并可导出到多种存储
  • 支持按需创建抓包做深度网络问题排查
  • 通过 Helm 安装并按需启用 dropreason、dns 等插件
  • 提供 kubectl retina CLI 与 CRD 两种抓包方式

容易踩的坑

装完 Helm 后还需自行配置 Prometheus 和 Grafana 才能采集与可视化指标；不再支持 Windows Server 2019 节点，Windows 工作负载需用 2022；CLI 抓包需先通过 Krew 安装 retina 插件。

内容由模型根据 README 生成，可能不完整或不准确，以官方文档为准。看原文 README

最近发版

5 个版本v1.3.1
全部 release
  1. v1.3.1最新正式版2026-10-23 · 2026-10-23 14:20 UTC

    Changelog

    • 6e294e98bdb2191d614a88e1d54037c4d803d41d chore(deps): bump github.com/klauspost/compress from 1.16.5 to 1.18.7 in /test/multicloud/test in the go_modules group across 1 directory (#2879)
    • a536bee1707c72aaf74aef954346a558bb0047ad chore: update golang-windowsservercore to 1.26.10-1 (#2890)
    • a7cfe45badea662c49ec6567a46a8932cd2e4c5f deps: bump actions/setup-node from 7.0.0 to 7.1.0 (#2855)
    • b1907df0a12547e72f56d9c0c1f53c488e2566fd deps: bump follow-redirects from 1.16.0 to 1.16.1 in /site (#2880)
    • 63faf0fdc6df222c8d00f717779f2098bfd49e4c deps: bump github.com/aws/aws-sdk-go-v2 from 1.47.2 to 1.47.3 (#2874)
    • cb30c2808825d30058997b6265565bb532bca777 deps: bump github.com/go-chi/chi/v5 from 5.3.2 to 5.4.0 (#2873)
    • af486ac0a741806d2dc330c70f5b31ba0f547095 deps: bump github.com/go-chi/chi/v5 from 5.4.0 to 5.5.0 (#2882)
    • ad60b93470025b9dc98ba5c901b632e8368337fe deps: bump github.com/onsi/ginkgo/v2 from 2.33.0 to 2.33.1 (#2876)
    • 68a0a7b49ad3b361d9e1817ace7e142eb28d31a1 deps: bump github.com/prometheus/client_golang from 1.24.1 to 1.25.0 (#2862)
    • 73ff58b81727a5853513c85ab3265e8c54aa9e30 deps: bump github.com/prometheus/common from 0.72.0 to 0.72.1 (#2875)
    • 137f06729814ace5f4a55bf26ad34cff376cfaf1 deps: bump golang.org/x/mod from 0.41.0 to 0.42.0 (#2877)
    • d4bb64d081f6239346b617e2b39cf3bb928187b0 deps: bump golang.org/x/sys from 0.48.0 to 0.49.0 (#2858)
    • 118ebb91bfcd50f8f4ab8a82bbc45d593a5e410e deps: bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0 (#2866)
    • 5a20da66243d6ad6594d2b82a8d49f7dc1753ca7 deps: bump launch-editor from 2.14.1 to 2.14.2 in /site (#2881)
    • eef910e436fbd437d4a64b2d6b572af9a9908445 deps: bump react-dom from 19.3.0 to 19.3.1 in /site (#2884)
    • 9acebfb0d6767ef953d5c119405efd9dcc95de20 deps: bump the aws-sdk group across 1 directory with 3 updates (#2857)
    • bc634c8798bc31c6eadd8c239a382a3bfd457208 deps: bump the aws-sdk group across 1 directory with 3 updates (#2872)
    • ca01b5cda94e6e3b53ce8bdec3bf1514512f1a2e deps: bump the azurelinux-base group across 3 directories with 1 update (#2868)
    • f001d9be96bbbfbc5949ea79f4bdab6c5dc072e1 deps: bump the azurelinux-base group across 4 directories with 2 updates (#2888)
    • 822d41941483a1cbd4c721ce4f7df032c8c4ef06 deps: bump the codeql-action group with 4 updates (#2871)
    • a2a7637d935ff318d5121f0498f2433abfa6dae8 deps: bump the golang-base group across 5 directories with 1 update (#2867)
    • 745783769bd26202e133413abb5f59db743cb204 deps: bump the golang-base group across 7 directories with 1 update (#2883)
    • d3a03dd6ae8d915fedaa249a63c1a9578b7cafe7 deps: bump the windows-base group across 3 directories with 2 updates (#2861)
    • 01a8617d9a86aea3e2a5c0586f9b65769033c445 feat(helm): add podLabels support for agent and operator pods (#2494)
    • a4c98baea031de1ddaf39722c9951d21fded4444 fix: log known benign Windows PktMon decode failures at debug level (#2887)
  2. v1.3.02026-10-16 · 2026-10-16 15:49 UTC
    查看更新说明

    Notable Changes

    • Updated Cilium to v1.20.2 and adapted Retina to its relocated internal APIs — microsoft/retina#2628.
    • Updated vulnerable dependencies in Retina container images — microsoft/retina#2859.
    • Added nano and crictl to the shell image — microsoft/retina#2706.
    • Added reporting for events dropped when packet-parser buffer writes fail — microsoft/retina#2503.
    • Improved Windows reliability with graceful agent shutdown and a fix for an E2E command-output buffer race — microsoft/retina#2843, microsoft/retina#2838.

    Features and Reliability

    • Report dropped events when writing to the packet-parser buffer fails — microsoft/retina#2503.
    • Include nano and crictl in the shell image — microsoft/retina#2706.
    • Gracefully stop Windows Retina agents using a preStop marker — microsoft/retina#2843.

    Security and Dependencies

    • Update vulnerable dependencies in Retina images — microsoft/retina#2859.
    • Upgrade Cilium to v1.20.2 — microsoft/retina#2628.
    • Update Azure Linux base images and Go builder images.
    • Upgrade AWS SDK modules, including configuration, credentials, and S3 clients.
    • Upgrade gopacket to v1.7.4, gRPC to v1.84.0, and Prometheus common to v0.72.0.
    • Update OpenTelemetry packages and OTLP log/trace exporters.
    • Upgrade Distribution to v3.1.2 and the Azure cloud-provider client to v0.23.2.
    • Update Ginkgo, Gomega, and Go module/synchronization libraries.
    • Update documentation-site dependencies, including brace-expansion, fast-uri, http-cache-semantics, joi, qs, shell-quote, and source-map-js.

    CI and Test Improvements

    • Publish plain-SHA image manifests for E2E and scale tests — microsoft/retina#2831.
    • Fix the ExecPod output-buffer race behind Windows NUL responses in E2E tests — microsoft/retina#2838.
    • Retry and verify AKS resource-group cleanup in scale tests, and reduce the test cluster size to 250 nodes — microsoft/retina#2798.
    • Update GitHub Actions dependencies, including CodeQL, Syft, QEMU setup, and Kind.

    Documentation

    • Align capture CLI documentation with current flag behavior and document retrieval of rotating captures — microsoft/retina#2821.

    Full Changelog: https://github.com/microsoft/retina/compare/v1.2.9...v1.3.0

  3. v1.2.92026-09-25 · 2026-09-25 16:10 UTC
    查看更新说明

    Changelog

    • 3a9b17d9b6e5e4f47b4c3cef2e60eafb92d07244 chore(ci): remove redundant image and merge-queue perf workflows (#2802)
    • 034fb2edb49983a13f8e03d4473d6cddd3fc8866 deps: bump azure/login from 3.0.2 to 3.1.0 (#2767)
    • cb900d5f43829e62c3ce2f0657b7ca04aef6e359 deps: bump colord from 2.9.3 to 2.10.0 in /site (#2749)
    • 842ef68e70305b041f20f44fc05a878f8a1e01b3 deps: bump css-loader from 7.1.4 to 7.1.5 in /site (#2745)
    • c77597805dda0585e7572de718224687000cdcd4 deps: bump docker/build-push-action from 7.3.0 to 7.4.0 (#2791)
    • 1d9d8e0534229e5981e71253aa860f5a2a67149c deps: bump docker/login-action from 3.7.0 to 4.6.0 (#2734)
    • 8f49ea8f89cb2802c864c44bd1dec77971d0f806 deps: bump docker/setup-buildx-action from 4.3.0 to 4.4.1 (#2796)
    • a2ccbd170cc9188b32d51591b0cb9f6f8b15d0fa deps: bump docker/setup-qemu-action from 4.2.0 to 4.3.0 (#2732)
    • d5ad486f3f6a1f3d50a3742f1bff12424f4865c7 deps: bump github.com/aws/aws-sdk-go-v2 from 1.44.0 to 1.46.0 (#2771)
    • 99bb11424f5688da05c02d672cd9e7ebabf389f6 deps: bump golang.org/x/sync from 0.22.0 to 0.23.0 (#2756)
    • 42ac599efa39bd54ac4ba787a595baedda8b0362 deps: bump golang.org/x/sys from 0.47.0 to 0.48.0 (#2741)
    • e3b910a2594edb597b0b1298cc4dc34d82ec714f deps: bump postcss-selector-parser from 6.1.2 to 6.1.4 in /site (#2709)
    • 87720392222f84bd59d15daa3df7f01e121b1cba deps: bump react-dom from 19.2.8 to 19.3.0 in /site (#2783)
    • 488424e2e8c8daa72234c6d1376c451ddf903f36 deps: bump svgo from 3.3.4 to 3.3.5 in /site (#2747)
    • 0fead73420bbd6638162c66000e47c74ddfc18aa deps: bump the actions-patch group across 1 directory with 2 updates (#2731)
    • 7f536f138362a9812e9e59083262a60afbeba285 deps: bump the codeql-action group across 1 directory with 4 updates (#2795)
    • 9f5604a93f06c3a1287fdb2b0c40531202093a5f deps: bump the codeql-action group with 4 updates (#2766)
    • e2edcf3eb5ced1f4be480e41abdcdfe50e487677 deps: bump the golang-base group across 7 directories with 1 update (#2719)
    • 8859188e9182d8692ee722ef8e225134717d7788 deps: bump the golang-base group across 7 directories with 1 update (#2769)
    • 4e66aecab9f455155676f1bc79a51e940a6d1e84 deps: bump the windows-base group across 3 directories with 2 updates (#2755)
    • 5f56e60820338f819c7ace5353d74d9d45107a00 docs(capture): document cluster RBAC and admission policy prerequisites (#2768)
    • 83af82de6f58fc09eefcc5eaa283423c8786f906 feat(hubble-cli): Re add hubble CLI (#2757)
    • 3ab54c99240e91d03f3f123a760ba83a358c202b fix(capture): scope podSelector/podNames targets to the Capture's own namespace (#2758)
    • 17450b81e4f68281392163c1de3497d0bdd6c52f fix(capture): update capture download command (#2735)
    • c4b8413ac9dbd46a92b9109b3efcc23c54c0a668 fix(ci): report e2e status when prerequisites are skipped (#2775)
    • 5effcb770de8f768c26c36c5fbd545b53e42b969 fix(ci): restore the OneBranch pipeline and build fork PRs separately (#2779)
    • 6c4d659bc3d9445db89b369d5ac70472117371ac fix(ci): run the ADO CI pipeline on the OneBranch pool (#2746)
    • 4fdb91a33ba7ed7c466d3e387cea694f9b42d9ff fix(cli): remediate kubectl-retina vulnerabilities (#2803)
    • 12eaeaeae536906ecae1e6f67ea3680336297671 fix(cli): surface capture Pod admission failures for no-wait captures (#2801)
    • 6963d8ff86876f2fb5454a0fdafd82cd144a05d1 fix(ebpfwindows): gate advanced event filtering with bypass flag (#2794)
    • e3947ab0f8b13a5317f3378184e953e781ed9599 fix(images): remediate Retina OSS image vulnerabilities (#2807)
    • 800b252ee715a19cbd83bf2ff96080a3fb31f1ab fix(operator): set Pod owner reference on RetinaEndpoints for garbage collection (#2707)
    • f32755c3ac9a8727e435127940b24beec1a73416 fix(revert): run the ADO CI pipeline on the OneBranch pool (#2765)
    • 360128b42f72be8f413a3c80e9715313d2838446 fix(test-file): Remove test file (#2764)
    • f775678de6be6aa33c84673980afd1288f78151a test(ci): run full unit test suite on Windows (#2793)

    Moderate security issue A security issue in Retina v1.2.8 and earlier could allow an attacker with access to the cluster network to vie

  4. v1.2.82026-09-10 · 2026-09-10 11:11 UTC
    查看更新说明

    Changelog

    • 29c9243769c0a3e74fc10436ad7daef76a9e5811 deps: bump anchore/sbom-action/download-syft from 0.24.0 to 0.24.2 in the actions-patch group (#2702)
    • 9ed63b100d6a25ae84c4122c7e6f57f56652cdf4 deps: bump azure/login from 3.0.1 to 3.0.2 in the actions-patch group (#2700)
    • ff396f1966c3363774cb203e1f066c1443450765 deps: bump browserslist from 4.28.6 to 4.28.8 in /site (#2717)
    • 0a66baabcaaec6f7831499aa0f6f2d23e88fb8f9 deps: bump fast-uri from 3.1.5 to 3.1.7 in /site (#2716)
    • 197302409950d084ec549150a34f7d497c28b89d deps: bump github.com/onsi/gomega from 1.42.1 to 1.43.0 (#2726)
    • 7c175115521d2113032beeed492e2412b298e711 deps: bump github.com/prometheus/common from 0.70.1 to 0.71.0 (#2737)
    • 42c738dcab21aa47a8ca895bdb6acc39731a1fa3 deps: bump joi from 17.13.4 to 17.13.7 in /site (#2748)
    • bfa0bee7cf1763d308a8497d166fdc3de9b9552f deps: bump js-yaml from 4.3.1 to 4.3.2 in /site (#2750)
    • 0d3758d2ce95a4f37cb67e09ed3366bcb1185e52 deps: bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.21.7 to 0.22.1 (#2704)
    • 0462217747c0a22004da3e00ca3cc9dccf4c6f3a deps: bump the aws-sdk group across 1 directory with 3 updates (#2711)
    • cb77f341a9dfc57496b9e70f347452e299079626 deps: bump the aws-sdk group with 2 updates (#2720)
    • 27cf892a39c9d0a662e8af69ee7b0ebb6d1095c3 deps: bump the aws-sdk group with 3 updates (#2695)
    • 82448fff922328536442a2177d0b56b74b4e0c9b deps: bump the azure-sdk group with 2 updates (#2725)
    • 80e6b41d4130ab916b468f69dd6fb4251d41254c deps: bump the azurelinux-base group across 3 directories with 1 update (#2698)
    • d6f6c1b61ad2b6c8a08b2728cb3875a57591353b deps: bump the codeql-action group with 4 updates (#2699)
    • 1a71cd920ddf602040b08d4fae4c058a60059f6f deps: bump the golang-base group across 7 directories with 1 update (#2697)
    • 0a8044757e75e4104a0ca4c6ea25821854505320 deps: bump the golang-base group across 7 directories with 1 update (#2703)
    • 20a60fe98a3c22f314508a1c5ec477402da9a345 deps: bump the golang-base group across 7 directories with 1 update (#2715)
    • 100d27d772216e6368461436ffa0b6b724b885b2 deps: bump the otel group across 1 directory with 3 updates (#2712)
    • 5db582957049b9315167914245a3cf1e9320d5c2 feat(chart): make retina-operator resources configurable (#2592)
    • 12a73cffbd64363eaa7c6e1ac081bef2a9f27a67 feat(chart): make retina-operator securityContext configurable (#2593)
    • 5ae4fbd56a6e9cc1c53e411c7fec383890b11d2f feat: Add windows support and cli changes (#2625)
    • 432755e843ed8e778e8ef026727359e8661517ba fix(ci): always run e2e job so required PR check reports a status (#2724)
    • b49afd0e77359deca1f9dc3f568709efe14b011a fix(ci): build PR images without Azure service connection (#2710)
    • b006e89d6f301c85a07b7a524af57bc3d7ead94a fix(e2e): enable eBPF Windows plugin for advanced metrics tests (#2723)
    • 19c023182b157a764819d6f4ffed10cf36bb4346 fix(perf-test): remove ebpfwindows from advanced test profile, add dedicated profile for advanced with ebpfwindows (#2738)
    • b6601edd2623363d15754248977932c6a98b53e0 fix(scale-test): add unique runID to scale test telemetry (#2736)
    • 90f9b28d8bfc2ce8e45788d08fce92dbd14f7e5f fix: increase readinessProbe timeoutSeconds to avoid false negatives on Windows (#2754)
  5. v1.2.72026-08-28 · 2026-08-28 15:33 UTC
    查看更新说明

    Notable Changes

    • fix(build): bpf generation improvements 875ba8307dbab8f3bcfa4895277b2f8cf52bd464
    • fix(build): register current QEMU and compile pwru with clang d2b0d231ed61e50bc6775fad82351cc87c1e5db6
    • fix(ci): skip manifests and test jobs when dependencies fail 699ac354cb4f6637a76125469541d4d8e60a4f76
    • fix(hubble): surface controller-runtime manager start failures b4f72893925d2ae94306b4e813e97ede433ba1ac
    • fix(metrics): emit a port value for non-TCP/UDP flows to keep cardinality aligned 25e2b515c6d6dd57517ef7d781ca416d87638cc8
    • refactor(test): use native Go test output cd68bd63e346d8a7c61297f64d7a301bc073e964
    • test(shell): remove no-op unit tests 8cd9b37c18de942a6c1f3b67d918e961543ee92b

    Changelog

    • 632fda172f089cc61d04013389349f2bed2a34e8 deps: bump github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2 (#2691)
    • b165b60c7e624c8d07681ad49362ca31cbea1bcc deps: bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#2684)
    • d23d7e3842c9f588aa62604195828f5b3e023bc3 deps: bump google.golang.org/grpc from 1.83.0 to 1.83.1 (#2690)
    • f2b4a755e17d243f698638b6aefd13e723984649 deps: bump the aws-sdk group with 3 updates (#2682)
    • 1f2445a994d2c7e286eaa0db175416818db555d2 deps: bump the azurelinux-base group across 3 directories with 1 update (#2681)
    • 366a5e05efe0bc97e32f6c3d644cb38928fae249 deps: bump the codeql-action group with 4 updates (#2685)
    • 875ba8307dbab8f3bcfa4895277b2f8cf52bd464 fix(build): bpf generation improvements (#2688)
    • d2b0d231ed61e50bc6775fad82351cc87c1e5db6 fix(build): register current QEMU and compile pwru with clang (#2676)
    • 699ac354cb4f6637a76125469541d4d8e60a4f76 fix(ci): skip manifests and test jobs when dependencies fail (#2692)
    • b4f72893925d2ae94306b4e813e97ede433ba1ac fix(hubble): surface controller-runtime manager start failures (#2399)
    • 25e2b515c6d6dd57517ef7d781ca416d87638cc8 fix(metrics): emit a port value for non-TCP/UDP flows to keep cardinality aligned (#2679)
    • cd68bd63e346d8a7c61297f64d7a301bc073e964 refactor(test): use native Go test output (#2694)
    • 8cd9b37c18de942a6c1f3b67d918e961543ee92b test(shell): remove no-op unit tests (#2689)

    What's Changed

    New Contributors

    • @thc1006 made their first contribution in https://g

用户点评

登录用户的真实使用记录，可按版本和硬件筛选
共 0 条

    还没有人点评。第一个说出真实体验的人最有价值。

    README 原文

    未翻译
    在 GitHub 打开

    Open in GitHub Codespaces

    goreport GitHub release retina-publish license

    retina-test retinash retina-codeql-img retina-golangci-lint-img

    Overview

    Retina is a cloud-agnostic, open-source Kubernetes network observability platform that provides a centralized hub for monitoring application health, network health, and security. It provides actionable insights to cluster network administrators, cluster security administrators, and DevOps engineers navigating DevOps, SecOps, and compliance use cases.

    Retina collects customizable telemetry, which can be exported to multiple storage options (such as Prometheus, Azure Monitor, and other vendors) and visualized in a variety of ways (like Grafana, Azure Log Analytics, and other vendors).

    Features

    • eBPF-based Network Observability platform for Kubernetes workloads.
    • On-Demand and Configurable.
    • Actionable, industry-standard Prometheus metrics.
    • Streamlined Packet Captures for deep dives.
    • Cloud-agnostic, supporting multiple OS (like Linux, Windows, Azure Linux).

    Why Retina?

    Retina lets you investigate network issues on-demand and continuously monitor your clusters. For scenarios where Retina shines, see the intro docs here

    Documentation

    See retina.sh for documentation and examples.

    Known Limitations

    ⚠️ Performance on High-Core-Count Systems: Community users have reported performance considerations when using Advanced metrics (with packetparser plugin) on nodes with 32+ CPU cores under high network load. Consider starting with Basic metrics mode on large node types. See Known Limitations for details.

    ⚠️ Windows Server 2019: Retina no longer supports Windows Server 2019 nodes. Use Windows Server 2022 for Windows workloads.

    Capabilities

    Retina has two major features:

    Metrics Quick Install Guide

    Retina can be installed using the Helm chart from GHCR:

    # Set the version to a specific version here or get latest version from GitHub API.
VERSION=$( curl -sL https://api.github.com/repos/microsoft/retina/releases/latest | jq -r .name)
helm upgrade --install retina oci://ghcr.io/microsoft/retina/charts/retina \
    --version $VERSION \
    --set image.tag=$VERSION \
    --set operator.tag=$VERSION \
    --set logLevel=info \
    --set enabledPlugin_linux="\[dropreason\,packetforward\,linuxutil\,dns\]"

    Set the version and image tag arguments to the desired version, if different.

    After Helm install, follow the steps for setting up Prometheus and Grafana to configure metrics collection and visualization.

    Captures Quick Start Guide

    Captures via CLI

    The preferred way to install the Retina CLI using Krew.

    kubectl krew install retina

    Other installation options are documented in CLI Installation.

    Verify installation:

    $ kubectl retina
Retina is an eBPF distributed networking observability tool for Kubernetes.

Usage:
  kubectl-retina [command]

Available Commands:
  capture     Capture network traffic
  completion  Generate the autocompletion script for the specified shell
  config      Configure retina CLI
  help        Help about any command
  shell       [EXPERIMENTAL] Interactively debug a node or pod
  trace       Retrieve status or results from Retina
  version     Show version

Flags:
  -h, --help   help for kubectl-retina

Use "kubectl-retina [command] --help" for more information about a command.

    To quickly start creating a capture:

    kubectl retina capture create --pod-selectors <app=my-app>

    For further CLI documentation, see Capture with Retina CLI.

    Captures via CRD

    Install Retina using Helm:

    VERSION=$( curl -sL https://api.github.com/repos/microsoft/retina/releases/latest | jq -r .name)
helm upgrade --install retina oci://ghcr.io/microsoft/retina/charts/retina \
    --version $VERSION \
    --set image.tag=$VERSION \
    --set operator.tag=$VERSION \
    --set image.pullPolicy=Always \
    --set logLevel=info \
    --set os.windows=true \
    --set operator.enabled=true \
    --set operator.enableRetinaEndpoint=true \
    --skip-crds \
    --set enabledPlugin_linux="\[dropreason\,packetforward\,linuxutil\,dns\,packetparser\]"

    Then follow steps in Capture CRD for documentation of the CRD and examples for setting up Captures.

    Contributing

    This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.

    When you submit a pull request, a CLA bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all repos using our CLA.

    This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact [email protected] with any additional questions or comments.

    Read more about how to begin contributing here.

    Verify signed images

    Retina images published to GHCR are cryptographically signed. You can verify their provenance with sigstore/cosign:

    REPO=microsoft/retina # or your repo
IMAGE=retina-operator # or other image to verify
# This can be replaced with another tag to verify, or with the image SHA256
LATEST_TAG=$(curl -s https://api.github.com/repos/microsoft/retina/releases | jq -r '.[0].name')
cosign verify ghcr.io/$REPO/$IMAGE:$LATEST_TAG --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp="https://github.com/$REPO" -o text

    Office Hours and Community Meetings

    We host a periodic open community meeting. Find the details here.

    Trademarks

    This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow Microsoft's Trademark & Brand Guidelines. Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party's policies.

    License

    See the LICENSE.

    Code of Conduct

    This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact [email protected] with any additional questions or comments.

    Contact

    For bugs or feature requests, open an issue. For security or vulnerability concerns, see SECURITY.md. For other communication, contact the maintainers at [email protected].

    相关项目

    同分类里 star 最高的项目
    对比全部 →
    kubernetes
    kubernetes·Go

    生产级的容器编排与调度平台，用来自动化部署、扩缩容和管理跨主机的容器化应用。

    容器编排+4容器 / Kubernetes
    128969+8945kv1.37.22026-11-10 11:09 UTC
    uptime-kuma
    louislam·JavaScript

    自托管的网站与服务可用性监控面板，支持 HTTP、TCP、Ping 等多种探活方式，通过实时图表和告警通知掌握服务宕机情况。

    可用性监控+4容器 / Kubernetes
    93444+1098.7k2.5.92026-11-10 04:49 UTC
    mall
    macrozheng·Java

    基于 Spring Boot + MyBatis 的完整电商系统，含前台商城和后台管理，覆盖商品、订单、会员、促销等模块，用 Docker 容器化部署。

    电商系统+4容器 / Kubernetes
    85029+1730kv1.0.32026-09-15 02:34 UTC
    moby
    moby·Go

    构建容器化系统的开源协作项目，提供可拼装的组件，用来搭建和定制自己的容器平台，也是 Docker 的上游基础。

    容器引擎+3容器 / Kubernetes
    72361+819kdocker-v29.9.32026-11-09 22:29 UTC