event-generator icon indicating copy to clipboard operation
event-generator copied to clipboard

Published 20 hours ago • verified publisher icon falcosecurity

Wrong user-agent

Open leogr opened this issue 3 years ago • 4 comments

Describe the bug

The event-generator is sending a bad User-Agent to the K8s API server when generating K8s audit log events.

How to reproduce it

I just extract the value from an Audit Log event :point_down:

"userAgent":"event-generator/v0.0.0 (linux/amd64) kubernetes/$Format"

Expected behaviour

The correct version number should be set. Also, I guess that $Farmat needs to be replaced with something else.

Screenshots

Environment

  • Falco version:
  • System info:
  • Cloud provider or hardware configuration:
  • OS:
  • Kernel:
  • Installation method:

Additional context

leogr avatar May 31 '22 15:05 leogr

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

poiana avatar Aug 29 '22 15:08 poiana

/remove-lifecycle stale

FedeDP avatar Aug 29 '22 15:08 FedeDP

/help

leogr avatar Sep 01 '22 09:09 leogr

@leogr: This request has been marked as needing help from a contributor.

Please ensure the request meets the requirements listed here.

If this request no longer meets these requirements, the label can be removed by commenting with the /remove-help command.

In response to this:

/help

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

poiana avatar Sep 01 '22 09:09 poiana

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

poiana avatar Nov 30 '22 09:11 poiana

/remove-lifecycle stale

alacuku avatar Dec 05 '22 07:12 alacuku

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

poiana avatar Mar 05 '23 09:03 poiana

/remove-lifecycle stale

alacuku avatar Mar 06 '23 07:03 alacuku

/remove-lifecycle stale

@alacuku Would you like to help with this?

leogr avatar Mar 08 '23 17:03 leogr