mirror of
https://github.com/falcosecurity/falco.git
synced 2026-04-04 11:02:16 +00:00
9c574732f2
* Update the Puppet module: * Apply puppet-lint recommendations * Update the README since the project moved from draios to falcosecurity in GitHub * Move parameters in their own file + Add the DEB repository automatically + Add the EPEL repository automatically + Add a logrotate configuration * Update the configuration file with all the latest updates falco-CLA-1.0-contributing-entity: Coveo Solutions Inc. falco-CLA-1.0-signed-off-by: Jean-Philippe Lachance <jplachance@coveo.com> * * Set required modules versions properly * Set dependencies between classes * Set the class order * Apply mstemm's code review * * Drop the Puppet 3 support * Use a working version of puppetlabs-apt * Use dependencies to be compatible with Puppet 4.7 and above
60 lines
1.3 KiB
Puppet
60 lines
1.3 KiB
Puppet
# == Class falco::params
|
|
#
|
|
class falco::params {
|
|
# Configuration parameters
|
|
$rules_file = [
|
|
'/etc/falco/falco_rules.yaml',
|
|
'/etc/falco/falco_rules.local.yaml',
|
|
'/etc/falco/k8s_audit_rules.yaml',
|
|
'/etc/falco/rules.d',
|
|
]
|
|
|
|
$json_output = false
|
|
$json_include_output_property = true
|
|
|
|
$log_stderr = true
|
|
$log_syslog = true
|
|
$log_level = 'info'
|
|
$priority = 'debug'
|
|
|
|
$buffered_outputs = false
|
|
$outputs_rate = 1
|
|
$outputs_max_burst = 1000
|
|
|
|
$syslog_output = {
|
|
'enabled' => true
|
|
}
|
|
$file_output = {
|
|
'enabled' => false,
|
|
'keep_alive' => false,
|
|
'filename' => '/var/log/falco-events.log'
|
|
}
|
|
$stdout_output = {
|
|
'enabled' => true
|
|
}
|
|
$webserver = {
|
|
'enabled' => false,
|
|
'listen_port' => 8765,
|
|
'k8s_audit_endpoint' => '/k8s_audit',
|
|
'ssl_enabled' => false,
|
|
'ssl_certificate' => '/etc/falco/falco.pem'
|
|
}
|
|
$program_output = {
|
|
'enabled' => false,
|
|
'keep_alive' => false,
|
|
'program' => 'curl http://some-webhook.com'
|
|
}
|
|
$http_output = {
|
|
'enabled' => false,
|
|
'url' => 'http://some.url'
|
|
}
|
|
|
|
# Installation parameters
|
|
$package_ensure = 'installed'
|
|
|
|
# Service parameters
|
|
$service_ensure = 'running'
|
|
$service_enable = true
|
|
$service_restart = true
|
|
}
|