github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-05 19:06:44 +00:00
Code Issues Projects Releases Wiki Activity

Add calico/node as a trusted container.

Browse Source 
It generally needs to run privileged.
This commit is contained in:
Mark Stemm 2017-09-20 18:25:11 -07:00
parent c4c5d2f585
commit e44ce9a8d3
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
rules/falco_rules.yaml
View File

@ -630,7 +630,8 @@
container.image startswith sysdig/sysdig or
container.image startswith gcr.io/google_containers/hyperkube or
container.image startswith quay.io/coreos/flannel or
container.image startswith gcr.io/google_containers/kube-proxy)
container.image startswith gcr.io/google_containers/kube-proxy or
container.image startswith calico/node)
# These containers are ones that are known to spawn lots of
# shells. Generally, they are for systems where the container is used