diff --git a/test/confs/grpc_unix_socket.yaml b/test/confs/grpc_unix_socket.yaml new file mode 100644 index 00000000..c116efab --- /dev/null +++ b/test/confs/grpc_unix_socket.yaml @@ -0,0 +1,38 @@ +# +# Copyright (C) 2020 The Falco Authors. +# +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# + +# Whether to output events in json or text. +json_output: false + +# Send information logs to stderr and/or syslog +# Note these are *not* security notification logs! +# These are just Falco lifecycle (and possibly error) logs. +log_stderr: false +log_syslog: false + +# Where security notifications should go. +stdout_output: + enabled: false + +# gRPC server using an unix socket. +grpc: + enabled: true + bind_address: "unix:////tmp/falco.sock" + threadiness: 8 + +grpc_output: + enabled: true \ No newline at end of file diff --git a/test/falco_tests.yaml b/test/falco_tests.yaml index f61a8b85..238cfe23 100644 --- a/test/falco_tests.yaml +++ b/test/falco_tests.yaml @@ -672,6 +672,20 @@ trace_files: !mux outputs: - /tmp/falco_outputs/program_output.txt: Warning An open was seen + grpc_unix_socket_outputs: + detect: True + detect_level: WARNING + rules_file: + - rules/single_rule.yaml + conf_file: confs/grpc_unix_socket.yaml + grpc: + address: unix:///tmp/falco.sock + proto: output.proto + service: falco.output.service + method: subscribe + results: + - "Warning An open was seen" + detect_counts: detect: True detect_level: WARNING