Fission output type blog post #484

gauravgahlot · 2021-07-22T03:16:33Z

Signed-off-by: Gaurav Gahlot gauravgahlot0107@gmail.com

What type of PR is this?

/kind content

Any specific area of the project related to this PR?

/area blog

poiana · 2021-07-22T03:16:41Z

Welcome @gauravgahlot! It looks like this is your first PR to falcosecurity/falco-website 🎉

gauravgahlot · 2021-07-22T03:16:46Z

/assign

Issif · 2021-07-22T05:13:16Z

content/en/blog/falcosidekick-reponse-engine-part-8-fission.md

+> * [Kubernetes Response Engine, Part 4 : Falcosidekick + Tekton]({{< ref "/blog/falcosidekick-reponse-engine-part-4-tekton" >}})
+> * [Kubernetes Response Engine, Part 5 : Falcosidekick + Argo]({{< ref "/blog/falcosidekick-reponse-engine-part-5-argo" >}})
+> * [Kubernetes Response Engine, Part 6 : Falcosidekick + Cloud Run]({{< ref "/blog/falcosidekick-reponse-engine-part-6-cloud-run" >}})
+> * [Kubernetes Response Engine, Part 7: Falcosidekick + Cloud Functions]({{< ref "/blog/falcosidekick-reponse-engine-part-7-cloud-functions" >}})


Suggested change

> * [Kubernetes Response Engine, Part 7: Falcosidekick + Cloud Functions]({{< ref "/blog/falcosidekick-reponse-engine-part-7-cloud-functions" >}})

> * [Kubernetes Response Engine, Part 7 : Falcosidekick + Cloud Functions]({{< ref "/blog/falcosidekick-reponse-engine-part-7-cloud-functions" >}})

Issif · 2021-07-25T11:44:59Z

/hold

We can't release this post before next version of falcosidekick

leogr

Just found some minor issues, otherwise looks good to me! 👏

leogr · 2021-08-18T10:04:17Z

content/en/blog/falcosidekick-reponse-engine-part-8-fission.md

+
+### Provision local Kubernetes Cluster
+
+There are various ways to provision a local Kubernetes cluster such as, KinD, k3s, k0s, Minikube etc. We are going to


Suggested change

There are various ways to provision a local Kubernetes cluster such as, KinD, k3s, k0s, Minikube etc. We are going to

There are various ways to provision a local Kubernetes cluster such as KinD, k3s, k0s, Minikube, etc. We are going to

leogr · 2021-08-18T10:04:37Z

content/en/blog/falcosidekick-reponse-engine-part-8-fission.md

+The earlier posts in this series, show how to use Kubeless, Argo, Knative, and others to trigger a resource after getting input from Falcosidekick.
+Recently, Falcosidekick received a new output type support for [Fission](https://github.com/falcosecurity/falcosidekick/pull/255).
+
+In this blog post, we will cover using `Falcosidekick` and `Fission` to detect and delete a compromised pod in Kubernetes cluster.


Suggested change

In this blog post, we will cover using `Falcosidekick` and `Fission` to detect and delete a compromised pod in Kubernetes cluster.

In this blog post, we will cover using `Falcosidekick` and `Fission` to detect and delete a compromised pod in a Kubernetes cluster.

leogr · 2021-08-18T10:08:54Z

content/en/blog/falcosidekick-reponse-engine-part-8-fission.md

+
+The function we are going to deploy basically receives events for an infected pod from the _Falcosidekick_ and deletes it immediately.
+Before deploying the function we need some permissions to delete Pod.
+We create a `ServiceAccount` with right to delete a Pod in any namespace, and we'll associate it to our function:


Suggested change

We create a `ServiceAccount` with right to delete a Pod in any namespace, and we'll associate it to our function:

We create a `ServiceAccount` with rights to delete a Pod in any namespace, and we'll associate it to our function:

leogr · 2021-08-18T10:09:58Z

content/en/blog/falcosidekick-reponse-engine-part-8-fission.md

+
+## Conclusion
+
+With this really simple example, we got another way to create a Response Engine with amazing pieces of software from Open Source world.


Suggested change

With this really simple example, we got another way to create a Response Engine with amazing pieces of software from Open Source world.

With this really simple example, we got another way to create a Response Engine with amazing pieces of software from the Open Source world.

Issif · 2021-08-18T10:29:17Z

content/en/blog/falcosidekick-reponse-engine-part-8-fission.md

@@ -0,0 +1,505 @@
+---
+title: "Kubernetes Response Engine, Part 8: Falcosidekick + Fission"
+date: 2021-07-22


Please update the date to a more recent one (after release of 2.24.0 of falcosidekick)

Issif · 2021-08-29T08:44:06Z

content/en/blog/falcosidekick-reponse-engine-part-8-fission.md

@@ -0,0 +1,505 @@
+---
+title: "Kubernetes Response Engine, Part 8: Falcosidekick + Fission"
+date: 2021-08-19


Suggested change

date: 2021-08-19

date: 2021-08-29

Issif

please update the date of the post

leogr

LGTM

Issif · 2021-08-31T07:40:14Z

content/en/blog/falcosidekick-reponse-engine-part-8-fission.md

@@ -0,0 +1,505 @@
+---
+title: "Kubernetes Response Engine, Part 8: Falcosidekick + Fission"


Suggested change

title: "Kubernetes Response Engine, Part 8: Falcosidekick + Fission"

title: "Kubernetes Response Engine, Part 9: Falcosidekick + Fission"

Issif · 2021-08-31T07:40:23Z

content/en/blog/falcosidekick-reponse-engine-part-8-fission.md

+title: "Kubernetes Response Engine, Part 8: Falcosidekick + Fission"
+date: 2021-08-29
+author: Gaurav Gahlot
+slug: falcosidekick-reponse-engine-part-8-fission


Suggested change

slug: falcosidekick-reponse-engine-part-8-fission

slug: falcosidekick-reponse-engine-part-9-fission

Issif · 2021-08-31T07:40:45Z

content/en/blog/falcosidekick-reponse-engine-part-8-fission.md

+> * [Kubernetes Response Engine, Part 4 : Falcosidekick + Tekton]({{< ref "/blog/falcosidekick-reponse-engine-part-4-tekton" >}})
+> * [Kubernetes Response Engine, Part 5 : Falcosidekick + Argo]({{< ref "/blog/falcosidekick-reponse-engine-part-5-argo" >}})
+> * [Kubernetes Response Engine, Part 6 : Falcosidekick + Cloud Run]({{< ref "/blog/falcosidekick-reponse-engine-part-6-cloud-run" >}})
+> * [Kubernetes Response Engine, Part 7 : Falcosidekick + Cloud Functions]({{< ref "/blog/falcosidekick-reponse-engine-part-7-cloud-functions" >}})


Can you add the part 8 with Flux v2 please

poiana · 2021-08-31T10:05:39Z

LGTM label has been added.

Git tree hash: afecdf26c827d0758c39d0463e6455e97c5b444e

gauravgahlot · 2021-09-01T04:57:48Z

Needs a rebase after #492 is merged.

Signed-off-by: Gaurav Gahlot <gauravgahlot0107@gmail.com>

danpop-chainguard · 2021-09-03T14:19:02Z

/lgtm
/approve

poiana · 2021-09-03T14:19:07Z

LGTM label has been added.

Git tree hash: ebfc731b5af7fbbdef0318e5c26dbfb0018c92c5

poiana · 2021-09-06T07:13:29Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: danpopSD, gauravgahlot, leogr

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

~~OWNERS~~ [leogr]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

leogr · 2021-09-08T16:37:07Z

/hold cancel

poiana added kind/content dco-signoff: yes area/blog labels Jul 22, 2021

poiana requested review from fntlnz and mstemm July 22, 2021 03:16

poiana assigned gauravgahlot Jul 22, 2021

poiana added the size/XL label Jul 22, 2021

gauravgahlot mentioned this pull request Jul 22, 2021

Falco example fission/examples#36

Merged

Issif reviewed Jul 22, 2021

View reviewed changes

gauravgahlot requested a review from Issif July 25, 2021 10:38

poiana added the do-not-merge/hold label Jul 25, 2021

leogr reviewed Aug 18, 2021

View reviewed changes

Issif reviewed Aug 18, 2021

View reviewed changes

gauravgahlot force-pushed the output-fission branch from 7b6a2cb to 3d2955b Compare August 19, 2021 05:11

gauravgahlot requested review from leogr and Issif August 19, 2021 05:15

gauravgahlot force-pushed the output-fission branch from 058bb15 to 9f8e288 Compare August 29, 2021 08:29

Issif reviewed Aug 29, 2021

View reviewed changes

Issif requested changes Aug 29, 2021

View reviewed changes

poiana assigned Issif Aug 29, 2021

gauravgahlot requested a review from Issif August 29, 2021 11:31

Issif approved these changes Aug 29, 2021

View reviewed changes

poiana added the lgtm label Aug 29, 2021

leogr previously approved these changes Aug 30, 2021

View reviewed changes

poiana assigned leogr Aug 30, 2021

poiana added the approved label Aug 30, 2021

Issif requested changes Aug 31, 2021

View reviewed changes

gauravgahlot dismissed leogr’s stale review via efb82a9 August 31, 2021 09:52

poiana removed the approved label Aug 31, 2021

gauravgahlot requested review from Issif and leogr August 31, 2021 09:52

Issif previously approved these changes Aug 31, 2021

View reviewed changes

poiana added the lgtm label Aug 31, 2021

gauravgahlot dismissed Issif’s stale review via 472f9ba August 31, 2021 10:42

gauravgahlot force-pushed the output-fission branch from efb82a9 to 472f9ba Compare August 31, 2021 10:42

poiana removed the lgtm label Aug 31, 2021

gauravgahlot added 6 commits September 1, 2021 12:49

Fission output type blog post

583a756

Signed-off-by: Gaurav Gahlot <gauravgahlot0107@gmail.com>

fixed spacing

3456b86

Signed-off-by: Gaurav Gahlot <gauravgahlot0107@gmail.com>

review fixes

e3f4c69

Signed-off-by: Gaurav Gahlot <gauravgahlot0107@gmail.com>

updated date of the post

10a7258

Signed-off-by: Gaurav Gahlot <gauravgahlot0107@gmail.com>

add part 8 - flux v2

16f4998

Signed-off-by: Gaurav Gahlot <gauravgahlot0107@gmail.com>

fix reponse -> response

df940ab

Signed-off-by: Gaurav Gahlot <gauravgahlot0107@gmail.com>

gauravgahlot force-pushed the output-fission branch from 472f9ba to df940ab Compare September 1, 2021 07:24

gauravgahlot requested a review from Issif September 1, 2021 07:25

poiana assigned danpop-chainguard Sep 3, 2021

poiana added the lgtm label Sep 3, 2021

leogr approved these changes Sep 6, 2021

View reviewed changes

poiana added the approved label Sep 6, 2021

poiana removed the do-not-merge/hold label Sep 8, 2021

poiana merged commit 08e83eb into falcosecurity:master Sep 8, 2021

gauravgahlot deleted the output-fission branch September 8, 2021 16:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fission output type blog post #484

Fission output type blog post #484

gauravgahlot commented Jul 22, 2021

poiana commented Jul 22, 2021

gauravgahlot commented Jul 22, 2021

Issif Jul 22, 2021

Issif commented Jul 25, 2021

leogr left a comment

leogr Aug 18, 2021

leogr Aug 18, 2021

leogr Aug 18, 2021

leogr Aug 18, 2021

Issif Aug 18, 2021

Issif Aug 29, 2021

Issif left a comment

leogr left a comment

Issif Aug 31, 2021

Issif Aug 31, 2021

Issif Aug 31, 2021

poiana commented Aug 31, 2021

gauravgahlot commented Sep 1, 2021

danpop-chainguard commented Sep 3, 2021

poiana commented Sep 3, 2021

poiana commented Sep 6, 2021

leogr commented Sep 8, 2021

	> * [Kubernetes Response Engine, Part 7: Falcosidekick + Cloud Functions]({{< ref "/blog/falcosidekick-reponse-engine-part-7-cloud-functions" >}})
	> * [Kubernetes Response Engine, Part 7 : Falcosidekick + Cloud Functions]({{< ref "/blog/falcosidekick-reponse-engine-part-7-cloud-functions" >}})


		### Provision local Kubernetes Cluster

		There are various ways to provision a local Kubernetes cluster such as, KinD, k3s, k0s, Minikube etc. We are going to

	In this blog post, we will cover using `Falcosidekick` and `Fission` to detect and delete a compromised pod in Kubernetes cluster.
	In this blog post, we will cover using `Falcosidekick` and `Fission` to detect and delete a compromised pod in a Kubernetes cluster.

	We create a `ServiceAccount` with right to delete a Pod in any namespace, and we'll associate it to our function:
	We create a `ServiceAccount` with rights to delete a Pod in any namespace, and we'll associate it to our function:


		## Conclusion

		With this really simple example, we got another way to create a Response Engine with amazing pieces of software from Open Source world.

		@@ -0,0 +1,505 @@
		---
		title: "Kubernetes Response Engine, Part 8: Falcosidekick + Fission"

	slug: falcosidekick-reponse-engine-part-8-fission
	slug: falcosidekick-reponse-engine-part-9-fission

Fission output type blog post #484

Fission output type blog post #484

Conversation

gauravgahlot commented Jul 22, 2021

poiana commented Jul 22, 2021

gauravgahlot commented Jul 22, 2021

Choose a reason for hiding this comment

Issif commented Jul 25, 2021

leogr left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Issif left a comment

Choose a reason for hiding this comment

leogr left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

poiana commented Aug 31, 2021

gauravgahlot commented Sep 1, 2021

danpop-chainguard commented Sep 3, 2021

poiana commented Sep 3, 2021

poiana commented Sep 6, 2021

leogr commented Sep 8, 2021