Empty Kubernetes fields in Falco output

[bzurkowski]

Tracking issue for falcosecurity/falco#1029.

[bzurkowski]

Fields seeem to be filled correctly. Verified on several rules. Closing.

{
   "output":"07:03:05.063269120: Warning Pod started using host network (user=system:serviceaccount:kube-system:replicaset-controller pod=hostnetwork-deployment-748bd48fcb-hrj2q ns=falco-event-generator images=busybox)",
   "priority":"Warning",
   "rule":"Create HostNetwork Pod",
   "time":"2020-05-07T07:03:05.063269120Z",
   "output_fields":{
      "jevt.time":"07:03:05.063269120",
      "ka.req.pod.containers.image":"busybox",
      "ka.resp.name":"hostnetwork-deployment-748bd48fcb-hrj2q",
      "ka.target.namespace":"falco-event-generator",
      "ka.user.name":"system:serviceaccount:kube-system:replicaset-controller"
   }
}

{
 "output":"07:04:10.489446912: Warning Pod started with sensitive mount (user=system:serviceaccount:kube-system:replicaset-controller pod=sensitive-mount-deployment-76477d5d8-82k4d ns=falco-event-generator images=busybox volumes=[{\"hostPath\":{\"path\":\"/etc\",\"type\":\"\"},\"name\":\"etc\"}])",
   "priority":"Warning",
   "rule":"Create Sensitive Mount Pod",
   "time":"2020-05-07T07:04:10.489446912Z",
   "output_fields":{
      "jevt.time":"07:04:10.489446912",
      "jevt.value":"[{\"hostPath\":{\"path\":\"/etc\",\"type\":\"\"},\"name\":\"etc\"}]",
      "ka.req.pod.containers.image":"busybox",
      "ka.resp.name":"sensitive-mount-deployment-76477d5d8-82k4d",
      "ka.target.namespace":"falco-event-generator",
      "ka.user.name":"system:serviceaccount:kube-system:replicaset-controller"
   }
}

{
   "output":"07:05:26.325649920: Warning Pod started with privileged container (user=system:serviceaccount:kube-system:replicaset-controller pod=privileged-deployment-7c5d789cf4-k4w5f ns=falco-event-generator images=busybox)",
   "priority":"Warning",
   "rule":"Create Privileged Pod",
   "time":"2020-05-07T07:05:26.325649920Z",
   "output_fields":{
      "jevt.time":"07:05:26.325649920",
      "ka.req.pod.containers.image":"busybox",
      "ka.resp.name":"privileged-deployment-7c5d789cf4-k4w5f",
      "ka.target.namespace":"falco-event-generator",
      "ka.user.name":"system:serviceaccount:kube-system:replicaset-controller"
   }
}