plugins
plugins copied to clipboard
Falco plugins registry
**What type of PR is this?** /kind feature **Any specific area of the project related to this PR?** /area plugins **What this PR does / why we need it**: This...
**What type of PR is this?** > Uncomment one (or more) `/kind ` lines: > /kind bug > /kind cleanup > /kind design > /kind documentation /kind failing-test > /kind...
**What type of PR is this?** > Uncomment one (or more) `/kind ` lines: /kind bug > /kind cleanup > /kind design > /kind documentation > /kind failing-test /kind feature...
**Motivation** Just like in AWS I want to be able to monitor my k8s audit logs in Azure. **Feature** A implementation of reading k8s_aduit logs in AKS through [Log Analytics...
**Describe the bug** When loading rules, falco finds the rules file as invalid with the following error: ``` LOAD_ERR_COMPILE_OUTPUT (Error compiling output): .... has an invalid index argument not composed...
**Motivation** As today most projects are multi-cloud, we would need k8saudit plug-in for at least AKS and GCP **Feature** k8s audit plug-ins for AKS and GKE **Alternatives** Today's alternative is...
In January 2022, Falco introduced its first version of a Plugin framework to extend its available inputs. The framework has been enhanced in the following months to have something production...
**Describe the bug** the eks audit plugin is emitting events for "disallowed k8s user" for system users. There are rules to exclude system users but they are apparently not being...
**Describe the bug** When I looked at the `k8s_audit_rules.yaml` of my falco deployment (uses the `k8saudit-eks` plugin), I noticed that there are rules that use variables which aren't defined anywhere....
**What to document** We have no definite naming conventions for either commits or release notes (I don't think we have release notes at all). In Falco, we have a naming...