From fd6a1d0d056f2c314a65ed645fe496a56d7fa0d5 Mon Sep 17 00:00:00 2001 From: maxgio92 Date: Wed, 28 Apr 2021 16:17:42 +0200 Subject: [PATCH] clean(rules/falco_rules.yaml): remove deprecated oci image repositories Signed-off-by: maxgio92 --- rules/falco_rules.yaml | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/rules/falco_rules.yaml b/rules/falco_rules.yaml index 58983871..28aca84c 100644 --- a/rules/falco_rules.yaml +++ b/rules/falco_rules.yaml @@ -1787,7 +1787,6 @@ docker.io/falcosecurity/falco, docker.io/mesosphere/mesos-slave, docker.io/rook/toolbox, - docker.io/sysdig/falco, docker.io/sysdig/sysdig, falcosecurity/falco, gcr.io/google_containers/kube-proxy, @@ -1801,7 +1800,6 @@ k8s.gcr.io/kube-proxy, k8s.gcr.io/prometheus-to-sd, quay.io/calico/node, - sysdig/falco, sysdig/sysdig, sematext_images ] @@ -1827,7 +1825,7 @@ # host filesystem. - list: falco_sensitive_mount_images items: [ - docker.io/sysdig/falco, docker.io/sysdig/sysdig, sysdig/falco, sysdig/sysdig, + docker.io/sysdig/sysdig, sysdig/sysdig, docker.io/falcosecurity/falco, falcosecurity/falco, gcr.io/google_containers/hyperkube, gcr.io/google_containers/kube-proxy, docker.io/calico/node, @@ -2332,9 +2330,9 @@ - macro: k8s_containers condition: > (container.image.repository in (gcr.io/google_containers/hyperkube-amd64, - gcr.io/google_containers/kube2sky, docker.io/sysdig/falco, + gcr.io/google_containers/kube2sky, docker.io/sysdig/sysdig, docker.io/falcosecurity/falco, - sysdig/falco, sysdig/sysdig, falcosecurity/falco, + sysdig/sysdig, falcosecurity/falco, fluent/fluentd-kubernetes-daemonset, prom/prometheus, ibm_cloud_containers) or (k8s.ns.name = "kube-system"))