plugins

plugins copied to clipboard

K8smeta does not populate its events even though it is configured correctly and there are no errors

11

**Describe the bug** I set up k8smeta and k8smetacollector according to this command (line 273 in [Falco's official Helm chart](https://github.com/falcosecurity/charts/blob/master/charts/falco/README.md?plain=1)): ```bash helm install falco falcosecurity/falco \ --namespace falco \ --create-namespace...

fjellvannet

Falco Audit Plugin for EKS - HA and sidekick

3

**Motivation** I would like to have High Avaibility for my falco audit eks plugin which works as one pod in eks cluster. I don’t want to miss any of the...

cloudec1993

[github plugin] split the field github.repo

4

**What type of PR is this?** > Uncomment one (or more) `/kind ` lines: > /kind bug > /kind cleanup > /kind design > /kind documentation > /kind failing-test /kind...

Issif

**Motivation** When I add rules for custom data sources, it is not always so convenient. Can the team add new event sources for rule debugging, such as logs or test...

wzyhay

update(cloudtrail): Add support for field slice metadata

1

Add the ability to extract the location of each field in each log message. **What type of PR is this?** > Uncomment one (or more) `/kind ` lines: > /kind...

geraldcombs

I'm currently working on implementing Falco across my organization and looking into enabling Kubernetes audit log monitoring for our AKS (Azure Kubernetes Service) clusters using the k8saudit-aks plugin. From what...

sanchaysaxena

Add support for Ory (IAM)

2

**Motivation** In addition to the native Okta integration, it would be nice if Falco supported one of the leading cloud-native kubernetes-centric IAM solutions, Ory (https://ory.sh) **Feature** Similar to the Okta...

mfreeman451

new(plugins/container): allow to specify which hook to be attached between {"create", "start"}

3

**What type of PR is this?** /kind feature **Any specific area of the project related to this PR?** /area plugins **What this PR does / why we need it**: Some...

FedeDP

build(deps): bump github.com/testcontainers/testcontainers-go from 0.35.0 to 0.36.0 in /plugins/kafka

2

Bumps [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) from 0.35.0 to 0.36.0. Release notes Sourced from github.com/testcontainers/testcontainers-go's releases. v0.36.0 What's Changed ⚠️ Breaking Changes feat(azure)!: add Azurite, EventHubs and ServiceBus in the new Azure module, deprecating...

dependabot[bot]

build(deps): bump the gomod group across 1 directory with 2 updates

2

Bumps the gomod group with 1 update in the /plugins/cloudtrail directory: [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2). Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.69 to 1.17.70 Commits 2fc9c3b Release 2025-03-31 3cb015d Regenerated Clients a26a81a Update endpoints model 5f89f10...

dependabot[bot]