mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-23 21:11:50 +00:00
559240b628
Add an example puppet module for falco. This module configures the main falco configuration file /etc/falco/falco.yaml, providing templates for all configuration options. It installs falco using debian/rpm packages and installs/manages it as a systemd service.
32 lines
918 B
Puppet
32 lines
918 B
Puppet
class falco (
|
|
$rules_file = [
|
|
'/etc/falco/falco_rules.yaml',
|
|
'/etc/falco/falco_rules.local.yaml'
|
|
],
|
|
$json_output = 'false',
|
|
$log_stderr = 'false',
|
|
$log_syslog = 'true',
|
|
$log_level = 'info',
|
|
$priority = 'debug',
|
|
$buffered_outputs = 'true',
|
|
$outputs_rate = 1,
|
|
$outputs_max_burst = 1000,
|
|
$syslog_output = {
|
|
'enabled' => 'true'
|
|
},
|
|
$file_output = {
|
|
'enabled' => 'false',
|
|
'keep_alive' => 'false',
|
|
'filename' => '/tmp/falco_events.txt'
|
|
},
|
|
$program_output = {
|
|
'enabled' => 'false',
|
|
'keep_alive' => 'false',
|
|
'program' => 'curl http://some-webhook.com'
|
|
},
|
|
) {
|
|
include falco::install
|
|
include falco::config
|
|
include falco::service
|
|
}
|