Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cleanup of on-top-of-Kubernetes solutions #7

Closed
maxgio92 opened this issue Apr 30, 2020 · 2 comments
Closed

Cleanup of on-top-of-Kubernetes solutions #7

maxgio92 opened this issue Apr 30, 2020 · 2 comments
Assignees
Labels
kind/feature New feature or request

Comments

@maxgio92
Copy link
Member

maxgio92 commented Apr 30, 2020

Motivation

I think there are too ways to deploy Falco on top of Kubernetes (deployment VS daemonset + with-RBAC VS without-RBAC + Falco slim container image VS Falco "full" container image).

Feature

I'd maintain only the daemonset solution since the driverloader should run on every node, with RBAC enabled since it is the default authorization mechanism for apps in k8s.
Furthermore, since this is not an official method to deploy Falco (kernelspace and userspace components), I think that it's better to keep it simple.

Additional context

The Falco images are going to be under review; see here for details.

/kind feature

@leogr
Copy link
Member

leogr commented May 4, 2020

Has that been fixed?
I believe so, except for the slim image that should be fixed by falcosecurity/contrib#5

Furthermore, integrations/k8s-using-deployment seems to be a different use case that we should still keep, IMO.

@maxgio92
Copy link
Member Author

maxgio92 commented May 4, 2020

Yes, I agree. As the deployment solution should still be in place this issue can be considered fixed for me too.

@maxgio92 maxgio92 closed this as completed May 4, 2020
@maxgio92 maxgio92 self-assigned this May 4, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants