Thomas Labarussias comments

Results 291 comments of


                                            Thomas Labarussias

Developer guide for plugins

I'm ok for closing this issue.

Deployment of Falco in air-gapped environments

@NissesSenap no problem, I get that. If you have a WIP repo, please share it as reference

Deployment of Falco in air-gapped environments

I can help you for sure. For the CI, we need to see with @jasondellaluce too

Deployment of Falco in air-gapped environments

/assign

Request: Could a Falco plugin take over responsibility for the AKS Audit Log Forwarder from Sysdig?

I'm not experienced with AKS either, but I developed the` k8saudit-eks` plugin. Basically, only the auth + log collection has to be implemented, the logic for extraction and export of...

rules of k8saudit-eks plugin use lists defined in falco_rules.yaml, not possible to overwrite

Exactly, the `k8saudit-eks` plugin relies on the `k8saudit-rules`. By installing the latest version, it should be ok thanks to @sboschman.

rules of k8saudit-eks plugin use lists defined in falco_rules.yaml, not possible to overwrite

can we close this issue? thanks

eks audit plugin shows events for system users.

The first should be to specify for each plugin, in the registry, the kind of expected deployment (daemonset, 1 replica deployment, multi-replicas deployment). This information could be part of the...

Move `org.yaml` here

This is maybe a silly question, why are we moving configs in evolution and not in a dedicated repo with all configs useful across repos?