move to falco repository

[kaldyka]

Signed-off-by: Akos Kaldy kaldyka@gmail.com

What type of PR is this?

Uncomment one (or more) /kind <> lines:

/kind bug

/kind cleanup

/kind documentation

/kind feature

/kind sandbox

/kind incubating

/kind officialsupport

Any specific area of the project related to this PR?

Uncomment one (or more) /area <> lines:

/area deploy

/area examples

/area integrations

/area proposals

What this PR does / why we need it:

The main purpose of this sidecar is to create an invisible connection between Falco and the Phoenix moving target defense operator (www.r6security.com). The one-way flow of information is achieved by modifying the affected Pod's annotation whenever a new Falco event occurs. Basically using Falco events as triggers to continuously scramble the attack surface of the cluster hence making hackers' lives way harder.

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewer:

[poiana]

Welcome @kaldyka! It looks like this is your first PR to falcosecurity/evolution 🎉

[maxgio92]

Hey @kaldyka, thank you for your first contribution! We're going to review this PR ASAP :)

[leodido]

This looks interesting!

Would someone working full-time on Falco please take a look at it, I do not have cycles rn.

@kaldyka: I've read the README, would you please add 1 or 2 lines of description to the PR corpus for future reference?

/cc @falcosecurity/evolution-maintainers

[zsmav]

@leodido something along these lines?

"The main purpose of this sidecar is to create an invisible connection between Falco and the Phoenix moving target defense operator (www.r6security.com). The one-way flow of information is achieved by modifying the affected Pod's annotation whenever a new Falco event occurs. Basically using Falco events as triggers to continuously scramble the attack surface of the cluster hence making hackers' lives way harder."

[maxgio92]

For me that's ok @zsmav. /cc @leogr @leodido

[leodido]

@leodido something along these lines?

"The main purpose of this sidecar is to create an invisible connection between Falco and the Phoenix moving target defense operator (www.r6security.com). The one-way flow of information is achieved by modifying the affected Pod's annotation whenever a new Falco event occurs. Basically using Falco events as triggers to continuously scramble the attack surface of the cluster hence making hackers' lives way harder."

Yup!

[zsmav]

@maxgio92 and @nestorsalceda - let us know if you need anything else. ... thanks

[poiana]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: kaldyka, leogr

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [leogr]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[poiana]

LGTM label has been added.

Git tree hash: 52ec1658a98eb78c0a2dedb350504d776d56736d

[leodido]

💯

/approve