Skip to content

Releases: giantswarm/falco-app

v0.10.0

05 Feb 15:51
@github-actions github-actions
v0.10.0
bda81bf
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.10.0 Latest
Latest

Changed

  • Update Falco to upstream version 0.40.0
Assets 2
Loading

v0.9.1

23 Oct 19:33
@github-actions github-actions
v0.9.1
8159d8e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.9.1

Changed

  • Add feature gates for enabling/disabling individual Falco components.
Assets 2
Loading

v0.9.0

13 Aug 07:44
@github-actions github-actions
v0.9.0
aa9fbec
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.9.0

Added

  • Add custom rule to detect access to root CA key file in control plane nodes
  • Added the falco-k8s-metacollector.
  • Added team label to the daemonset.

Changed

  • Remove API check on PolicyException.
  • Updated Falco chart version from 3.8.1 to 4.6.1.
  • Updated Falco-exporter chart version from 0.9.9 to 0.11.0
  • Updated Falcosidekick chart version from 0.7.5 to 0.8.2
  • Updated Falco to upstream version 0.38.1.
  • Edited Kyverno Policy Exceptions to allow falco-k8s-metacollector.
  • Edited the Falco Cilium Network Policy to allow traffing from the falco-k8s-metacollector.
Assets 2
Loading

v0.8.1

30 Apr 16:39
@github-actions github-actions
v0.8.1
879286a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.8.1

Changed

  • Update Falco CiliumNetworkPolicy to allow communication with Falco Sidekick.
Assets 2
Loading

v0.8.0

25 Jan 17:10
@github-actions github-actions
v0.8.0
1836685
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.8.0

Changed

  • Enable CiliumNetworkPolicies by default.

Added

  • Add CiliumNetworkPolicy for falco-exporter.
Assets 2
Loading

v0.7.2

12 Jan 10:44
@taylorbot taylorbot
v0.7.2
6f9169c
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.7.2

Changed

  • Configure gsoci.azurecr.io as the default container image registry.
Assets 2
Loading

v0.7.1

14 Dec 12:41
@taylorbot taylorbot
v0.7.1
e8d5342
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.7.1

Changed

  • Added SeccompProfile annotation to Falco-exporter PSP.
Assets 2
Loading

v0.7.0

08 Nov 13:46
@taylorbot taylorbot
v0.7.0
60e9dfa
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.7.0

Changed

  • Updated Falco chart version from 3.3.0 to 3.8.1.
  • Updated Falco-exporter chart version from 0.9.6 to 0.9.7
  • Updated Falcosidekick chart version from 0.6.1 to 0.7.5
  • Updated Falco to upstream version 0.36.1.

Added

  • Added the use of Falcoctl.

Notes

Falco made some big changes in the way rules are distributed, categorized, and updated.
For more information, check the Falco release notes.

This means that we will ship Falco with fewer rules by default, as aligned with upstream.

They have done this to give endusers a quieter default set of rules. They will now follow a standard, incubating, sandbox system.

Before this update, all these rules were shipped by default. This means, that if CustomRules or macros were based on some rules which are now considered incubating or sandbox rules, they are now broken.

This can be fixed by altering the configuration of falcoctl to also download and use the incubating and sandbox rules, or by rewriting your CustomRules.

For more information, please check the falco rules page.

Assets 2
Loading

v0.6.7

31 Oct 17:48
@taylorbot taylorbot
v0.6.7
108ffeb
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.6.7

Changed

  • Fixed Kyverno PolicyExceptions.
Assets 2
Loading

v0.6.6

27 Oct 15:41
@taylorbot taylorbot
v0.6.6
ee49def
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.6.6

Changed

  • Implemented the use of the global.podSecurityStandards.enforced toggle.
  • Fixed an issue with the falcoctl image value structure.
Assets 2
Loading