-
Notifications
You must be signed in to change notification settings - Fork 912
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
new: k8s node filtering #1671
new: k8s node filtering #1671
Conversation
fa8b4de
to
5b73ec5
Compare
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: leogr The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Signed-off-by: Leonardo Grasso <[email protected]>
Signed-off-by: Leonardo Grasso <[email protected]>
5b73ec5
to
6016c59
Compare
/hold |
/hold cancel |
Anyone up for a review? |
What type of PR is this?
/kind feature
Any specific area of the project related to this PR?
/area engine
What this PR does / why we need it:
See falcosecurity/libs#43
Which issue(s) this PR fixes:
Fixes #778
Special notes for your reviewer:
To enable this feature, the current node name (i.e. the one on which Falco is running) needs to be passed to Falco
via the
--k8s-node
command-line option.When Falco is deployed as a DaemonSet, the easiest way to automatically pass that value is by using the downward API. For example:
Update: the above example was fixed accordingly to what suggested in #1786
Does this PR introduce a user-facing change?: