mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-22 12:27:10 +00:00
new(test): setup gRPC output test case
Co-authored-by: Lorenzo Fontana <lo@linux.com> Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
This commit is contained in:
committed by
poiana
parent
c06ccf8378
commit
061c5f5ac9
38
test/confs/grpc_unix_socket.yaml
Normal file
38
test/confs/grpc_unix_socket.yaml
Normal file
@@ -0,0 +1,38 @@
|
|||||||
|
#
|
||||||
|
# Copyright (C) 2020 The Falco Authors.
|
||||||
|
#
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
|
||||||
|
# Whether to output events in json or text.
|
||||||
|
json_output: false
|
||||||
|
|
||||||
|
# Send information logs to stderr and/or syslog
|
||||||
|
# Note these are *not* security notification logs!
|
||||||
|
# These are just Falco lifecycle (and possibly error) logs.
|
||||||
|
log_stderr: false
|
||||||
|
log_syslog: false
|
||||||
|
|
||||||
|
# Where security notifications should go.
|
||||||
|
stdout_output:
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
# gRPC server using an unix socket.
|
||||||
|
grpc:
|
||||||
|
enabled: true
|
||||||
|
bind_address: "unix:////tmp/falco.sock"
|
||||||
|
threadiness: 8
|
||||||
|
|
||||||
|
grpc_output:
|
||||||
|
enabled: true
|
@@ -672,6 +672,20 @@ trace_files: !mux
|
|||||||
outputs:
|
outputs:
|
||||||
- /tmp/falco_outputs/program_output.txt: Warning An open was seen
|
- /tmp/falco_outputs/program_output.txt: Warning An open was seen
|
||||||
|
|
||||||
|
grpc_unix_socket_outputs:
|
||||||
|
detect: True
|
||||||
|
detect_level: WARNING
|
||||||
|
rules_file:
|
||||||
|
- rules/single_rule.yaml
|
||||||
|
conf_file: confs/grpc_unix_socket.yaml
|
||||||
|
grpc:
|
||||||
|
address: unix:///tmp/falco.sock
|
||||||
|
proto: output.proto
|
||||||
|
service: falco.output.service
|
||||||
|
method: subscribe
|
||||||
|
results:
|
||||||
|
- "Warning An open was seen"
|
||||||
|
|
||||||
detect_counts:
|
detect_counts:
|
||||||
detect: True
|
detect: True
|
||||||
detect_level: WARNING
|
detect_level: WARNING
|
||||||
|
Reference in New Issue
Block a user