Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add known k8s api callers to vagrant values.yaml and upgrade falco chart to 1.5.0 #1003

Merged
merged 1 commit into from
Oct 14, 2020

Conversation

pmalek-sumo
Copy link
Contributor

Description
Testing performed
  • ci/build.sh
  • Redeploy fluentd and fluentd-events pods
  • Confirm events, logs, and metrics are coming in

rules_user_known_k8s_api_callers.yaml: |-
- macro: user_known_contact_k8s_api_server_activities
condition: >
(proc.pcmdline = "fluentd /usr/local/bundle/bin/fluentd -c /fluentd/etc/fluent.conf -p /fluentd/plugins") or
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we use both proc names and the namespace?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We could but we'd need to template it because user can configure the destination template for our collection?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For vagrant env for now hardcoding should be fine though

Copy link
Contributor

@sumo-drosiek sumo-drosiek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks 🚀

@pmalek-sumo pmalek-sumo merged commit a439f94 into master Oct 14, 2020
@pmalek-sumo pmalek-sumo deleted the add-known-k8s-api-callers-falco branch October 14, 2020 11:55
@perk-sumo perk-sumo changed the title Add known k8s api callers to vagrant values.yaml and bump falco chart to 1.5.0 Add known k8s api callers to vagrant values.yaml and upgrade falco chart to 1.5.0 Jan 7, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants