Sebastien Le Digabel 2bc4fec33c rule(Anonymous Request Allowed): exclude {/livez, /readyz} ...

Fixes #1794.

/livez and /readyz don't require authentication and can generate a lot
of noise if the cluster is checked by an anonymous external
system.

Some k8s systems have those endpoints required to be anonymous, as per this
[link to an OpenShift
setup](http://static.open-scap.org/ssg-guides/ssg-ocp4-guide-cis.html#xccdf_org.ssgproject.content_rule_api_server_anonymous_auth).

Signed-off-by: Sebastien Le Digabel <sledigabel@gmail.com>

2022-05-04 13:04:29 +02:00

..

application_rules.yaml

update: license headers

2019-10-08 16:02:26 +02:00

aws_cloudtrail_rules.yaml

rule_output(Delete Bucket Public Access Block) typo

2022-02-03 18:23:08 +01:00

CMakeLists.txt

build: define "falco" component

2022-04-22 09:41:56 +02:00

falco_rules.local.yaml

update: license headers

2019-10-08 16:02:26 +02:00

falco_rules.yaml

new(rule): excessively capable containers

2022-04-29 07:35:50 +02:00

k8s_audit_rules.yaml

rule(Anonymous Request Allowed): exclude {/livez, /readyz}

2022-05-04 13:04:29 +02:00

okta_rules.yaml

Fix more typos

2022-04-20 12:21:27 +02:00

OWNERS

docs: specify labels that apply to each area

2019-09-16 10:11:25 +02:00