Issif

reserved_sources: ["syscall", "internal", "plugins"]
plugins:
  - name: k8saudit
    description: Read Kubernetes Audit Events and monitor Kubernetes Clusters
    authors: The Falco Authors
    contact: https://falco.org/community
    maintainers:
      - name: The Falco Authors
        email: [email protected]
    keywords:

Issif

#!/bin/bash

mkdir -p $HOME/.autok3s

sudo ignite run weaveworks/ignite-ubuntu --kernel-image=weaveworks/ignite-kernel:5.14.16 --name k3s-master --cpus 1 --memory=1GB --size=5GB --ssh=$HOME/.ssh/id_rsa.pub
sudo ignite run weaveworks/ignite-ubuntu --kernel-image=weaveworks/ignite-kernel:5.14.16 --name k3s-worker1 --cpus 1 --memory=2GB --size=5GB --ssh=$HOME/.ssh/id_rsa.pub
sudo ignite run weaveworks/ignite-ubuntu --kernel-image=weaveworks/ignite-kernel:5.14.16 --name k3s-worker2 --cpus 1 --memory=2GB --size=5GB --ssh=$HOME/.ssh/id_rsa.pub

export K3S_MASTER_IP=$(sudo ignite inspect vm k3s-master -t {{.Status.Network.IPAddresses}})
export K3S_WORKER1_IP=$(sudo ignite inspect vm k3s-worker1 -t {{.Status.Network.IPAddresses}})

Issif

#!/bin/bash

# Create custom-rules.yaml
cat <<EOF > custom-rules.yaml
falco:
  rulesFile:
    - /etc/falco/k8s_audit_rules.yaml
    - /etc/falco/rules.d/custom-rules.yaml
customRules:
  custom-rules.yaml: |-

Issif

package main

import (
	"bytes"
	"encoding/json"
	"fmt"
	"io"
	"log"
	"math/rand"
	"net/http"