event-generator
event-generator copied to clipboard
Add Rule Contact K8s API Server from container
Motivation
One of the falco default stable rule is Detecting communication attempt from a container to the K8s api server, it would be great if event-generator supported this rule as well Feature
Having an event that takes care of Contacting K8s API Server from a container rule Alternatives
Additional context
Hey @ashu8912 . I am interested in this issue. Am starting my work on adding this event to falco. /assign
Awesome @h4l0gen I think this is a big one to tackle and if you need help with anything please reach out, I am learning about the project myself but I have made some progress in understanding the codebase now so feel free to bring in new question and we always have @leogr
Thank you so much for providing me with your assistance, @ashu8912. I have started working on this and will reach out to you or @leogr if I need any help. I'll soon come up with a new event for Falco ❤️
Hey @ashu8912 , what would be the best way to connect with you?
I am available on the cncf slack
Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
If this issue is safe to close now please do so with /close.
Provide feedback via https://github.com/falcosecurity/community.
/lifecycle stale
/remove-lifecycle stale
Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
If this issue is safe to close now please do so with /close.
Provide feedback via https://github.com/falcosecurity/community.
/lifecycle stale
/remove-lifecycle stale