Jason Dellaluce

[Tracking] Opening multiple event sources in the same Falco instance

19

# Motivation The plugin system allows Falco to open new kinds of event sources that go beyond the historical syscall use case. Recently, this has been leveraged to port the...

refactor(userspace/falco): make output rate limiter optional and output engine explicitly thread-safe

2

**What type of PR is this?** /kind feature **Any specific area of the project related to this PR?** /area engine **What this PR does / why we need it**: This...

**Motivation** Since rule engine version 10, Falco allows specifying in each ruleset a list of required plugin and their version. Example (https://github.com/falcosecurity/plugins/blob/fd296e843f7516939fe6201bf2f4646eb0485055/plugins/k8saudit/rules/k8s_audit_rules.yaml#L20): ```yaml - required_plugin_versions: - name: k8saudit version: 0.1.0...

refactor!(userspace/falco): remove output rate limiter and make output engine explicitly thread-safe

7

**What type of PR is this?** /kind cleanup /kind design /kind feature **Any specific area of the project related to this PR?** /area engine **What this PR does / why...

new: add option to enable event sources selectively

2

**What type of PR is this?** /kind feature **Any specific area of the project related to this PR?** /area engine /area tests **What this PR does / why we need...

refactor(userspace/falco): reduce app actions dependency on app state and inspector

2

**What type of PR is this?** /kind cleanup **Any specific area of the project related to this PR?** /area engine **What this PR does / why we need it**: This...

refactor(userspace/falco): re-design stats writer and make it thread-safe

2

**What type of PR is this?** /kind cleanup /kind design **Any specific area of the project related to this PR?** /area engine **What this PR does / why we need...

update(userspace/falco): use move semantics in falco logger

4

**What type of PR is this?** /kind feature **Any specific area of the project related to this PR?** /area engine **What this PR does / why we need it**: This...

update(userspace/falco): enable using zlib with webserver

3

Signed-off-by: Jason Dellaluce **What type of PR is this?** /kind feature **Any specific area of the project related to this PR?** /area engine **What this PR does / why we...

update(userspace/falco): make webserver threadiness configurable

3

**What type of PR is this?** /kind feature **Any specific area of the project related to this PR?** /area engine **What this PR does / why we need it**: This...