github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-24 08:58:52 +00:00
Code Issues Projects Releases Wiki Activity

macro(allowed_k8s_users): exclude cloud-controller-manage to avoid false positives on k3s

Browse Source 
Signed-off-by: Lorenzo Fontana <fontanalorenz@gmail.com>
This commit is contained in:
Lorenzo Fontana 2020-10-15 18:00:27 +02:00 committed by poiana
parent 47fa7d53c4
commit 9ea195a0b7
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
rules/k8s_audit_rules.yaml
View File

@ -49,7 +49,8 @@
"kubernetes-admin", "kubernetes-admin",
vertical_pod_autoscaler_users, vertical_pod_autoscaler_users,
cluster-autoscaler, cluster-autoscaler,
"system:addon-manager" "system:addon-manager",
"cloud-controller-manager"
] ]
- rule: Disallowed K8s User - rule: Disallowed K8s User