Falco Policy Report CRD adapter

[JimBugwadia]

Develop an adapter to convert Falco results and periodically generate or update a Policy Report custom resource based on the WG Policy CRD.

The Falco Sidekick project may be the right integration point.

[sunstonesecure-robert]

I would lean towards a PR to Falco to produce policy reports rather than an adapter - if we have native CRD generation in the tools themselves I think it benefits all "generators" and consumers.

but ... I fully recognize the practical ramp-up issues involved with that. ie having to understand falco code base vs just read in json and call custom resource api. maybe this project is a bridge to that longer term goal.

[JimBugwadia]

@sunstonesecure-robert - yes! The intent is to start with adapters and then revisit native support across tools.

[yindia]

@JimBugwadia I am familiar with falcosidekick codebase and WG policy CRD. Can this assign to me?

[JimBugwadia]

@evalsocket @sunstonesecure-robert - this work has been submitted as a LXF mentorship project and we will be selecting a mentee to work on it based on the timelines at: https://github.com/cncf/mentoring/tree/master/lfx-mentorship/2021/02-Summer.

[rficcaglia]

Mea culpa! Jim can we post the previous and future proposals for projects and internships in the repo somewhere for review?

…

On Fri, Apr 30, 2021 at 10:07 AM Jim Bugwadia ***@***.***> wrote: @evalsocket <https://github.com/evalsocket> @sunstonesecure-robert <https://github.com/sunstonesecure-robert> - this work has been submitted as a LXF mentorship project and we will be selecting a mentee to work on it based on the timelines at: https://github.com/cncf/mentoring/tree/master/lfx-mentorship/2021/02-Summer . — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#51 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAGENITO6SYAQKLQW2EDEULTLLPWXANCNFSM43IQ5N7Q> .

[Aniket118]

Hello, @JimBugwadia I'm new to the CNCF community I'm interested in working on this project project idea. Can you please guide me on how to get started with it?

[JimBugwadia]

Hi @Aniket118 - thanks for your interest in contributing!

This project has been submitted as a LXF mentorship project and we will be selecting a mentee to work on it based on the timelines at: https://github.com/cncf/mentoring/tree/master/lfx-mentorship/2021/02-Summer.

Please feel free to apply at this link https://mentorship.lfx.linuxfoundation.org/project/cab6e242-33d5-427d-a408-9adff1a95271, and ask if you have any questions. Thanks!

[Aniket118]

Can you tell maximum of how many members can work on this project?

[JimBugwadia]

@Aniket118 - the project is for one mentee.

[Aniket118]

ok thanks

[anushkamittal20]

/assign @anushkamittal20

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue or PR as fresh with /remove-lifecycle stale
• Mark this issue or PR as rotten with /lifecycle rotten
• Close this issue or PR with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

[JimBugwadia]

@anushkamittal20 - is this ready to be closed?

[anushkamittal20]

Hey @JimBugwadia, Thomas has to review and allow merge for this PR. I will reach out to him regarding this. I have done the work and changes he requested earlier.