Melissa Kilby comments

Results 500 comments of


                                            Melissa Kilby

How do we balance longer-term priorities with urgent feature tasks?

/remove-lifecycle stale

Improve the error descriptions at Falco startup, especially for kernel driver issues

CC @Andreagit97

Support a falco.local.yaml configuration file with local changes to support unattended upgrades

Supportive! > There is already a falco_rules.local.yaml, what about having a falco.local.yaml that contains local configuration changes? I like this callout.

[tracking] Improve code documentation

/remove-lifecycle stale

[TRACKING] Expand Falco metrics w/ rules counters -> deprecate falco-exporter + new Grafana dashboard for Falco metrics

Dashboards still pending, cc @leogr and @alacuku perhaps track that in a new issue?

chore(docs): replace IN and OUT macros with docs

I don't have any problems with these changes @leogr - let's wait to hear from the others.

Kubernetes pod labels are sometimes missing

@Namnamseo once Falco 0.38.0 is out very soon it would be interesting to see if the container runtime socket info extraction is working better since we improved it a bit....

[Feature] Supporting field transformers in filtering language

> The val() transformer is a special no-op transformer that's needed at the language parser level in order to > disambuate field references from raw string values. For clarity: >...

Indicate the modern ebpf probe as the preferred deployment method for Falco

+1 Taking it one step further, make `modern_ebpf` the default driver as it's a significant overhead for us maintainers to assist adopters in debugging when Falco is not starting up....

Indicate the modern ebpf probe as the preferred deployment method for Falco

Also @Andreagit97 in fact we need more dedicated "debugging" guides: `Help` (located under Install and Operate) - Help, Falco is Dropping Events (-> Melissa as suggested by @FedeDP in a...