These iovisor guys write some cool stuff that uses bpf, like: https://github.com/iovisor/kubectl-trace