github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-08 12:19:09 +00:00
Code Issues Projects Releases Wiki Activity

CRI flag (#599)

Browse Source 
* update(integrations): CRI flag

Co-authored-by: Lorenzo Fontana <lo@linux.com>
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>

* fix(integrations): set the containerd socket

Co-Authored-By: Lorenzo Fontana <lo@linux.com>
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
This commit is contained in:
Leo Di Donato 2019-05-13 21:45:49 +02:00 committed by Mark Stemm
parent 52329f83b2
commit ff5d000736
2 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap.yaml
View File

@ -25,10 +25,12 @@ spec:
# env: # env:
# - name: SYSDIG_BPF_PROBE # - name: SYSDIG_BPF_PROBE
# value: "" # value: ""
args: [ "/usr/bin/falco", "-K", "/var/run/secrets/kubernetes.io/serviceaccount/token", "-k", "https://$(KUBERNETES_SERVICE_HOST)", "-pk"] args: [ "/usr/bin/falco", "--cri", "/host/run/containerd/containerd.sock", "-K", "/var/run/secrets/kubernetes.io/serviceaccount/token", "-k", "https://$(KUBERNETES_SERVICE_HOST)", "-pk"]
volumeMounts: volumeMounts:
- mountPath: /host/var/run/docker.sock - mountPath: /host/var/run/docker.sock
name: docker-socket name: docker-socket
- mountPath: /host/run/containerd/containerd.sock
name: containerd-socket
- mountPath: /host/dev - mountPath: /host/dev
name: dev-fs name: dev-fs
- mountPath: /host/proc - mountPath: /host/proc
@ -52,6 +54,9 @@ spec:
- name: docker-socket - name: docker-socket
hostPath: hostPath:
path: /var/run/docker.sock path: /var/run/docker.sock
- name: containerd-socket
hostPath:
path: /run/containerd/containerd.sock
- name: dev-fs - name: dev-fs
hostPath: hostPath:
path: /dev path: /dev

7
integrations/k8s-using-daemonset/k8s-without-rbac/falco-daemonset.yaml
View File

@ -18,10 +18,12 @@ spec:
image: falcosecurity/falco:latest image: falcosecurity/falco:latest
securityContext: securityContext:
privileged: true privileged: true
args: [ "/usr/bin/falco", "-K", "/var/run/secrets/kubernetes.io/serviceaccount/token", "-k", "https://kubernetes.default", "-pk", "-o", "json_output=true", "-o", "program_output.enabled=true", "-o", "program_output.program=jq '{text: .output}' | curl -d @- -X POST https://hooks.slack.com/services/see_your_slack_team/apps_settings_for/a_webhook_url"] args: [ "/usr/bin/falco", "--cri", "/host/run/containerd/containerd.sock", "-K", "/var/run/secrets/kubernetes.io/serviceaccount/token", "-k", "https://kubernetes.default", "-pk", "-o", "json_output=true", "-o", "program_output.enabled=true", "-o", "program_output.program=jq '{text: .output}' | curl -d @- -X POST https://hooks.slack.com/services/see_your_slack_team/apps_settings_for/a_webhook_url"]
volumeMounts: volumeMounts:
- mountPath: /host/var/run/docker.sock - mountPath: /host/var/run/docker.sock
name: docker-socket name: docker-socket
- mountPath: /host/run/containerd/containerd.sock
name: containerd-socket
- mountPath: /host/dev - mountPath: /host/dev
name: dev-fs name: dev-fs
- mountPath: /host/proc - mountPath: /host/proc
@ -40,6 +42,9 @@ spec:
- name: docker-socket - name: docker-socket
hostPath: hostPath:
path: /var/run/docker.sock path: /var/run/docker.sock
- name: containerd-socket
hostPath:
path: /run/containerd/containerd.sock
- name: dev-fs - name: dev-fs
hostPath: hostPath:
path: /dev path: /dev