{"push_id":3835633519,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"0ae518027609cad2a9326c9f1b5bdf834fe256cd","before":"b5b1d5c6b9728fbef292c2b0cfacfa518a90d178","commits":[{"sha":"bd4c1a47b1f7ee1e2cb8f299e717afb61724bf02","author":{"name":"Néstor Salceda","email":"34878d517dcf8383b76cc472991a9d3528a150c7@sysdig.com"},"message":"[stable/falco] Enable support of K8s audit events in Falco (#15668)\n\n* [stable/falco] Allow audit logging with Falco\n\nYou can enable it on minikube with the following command:\n\n`helm install --name falco --set falco.webserver.enabled=true --set\nfalco.webserver.clusterIP=10.96.0.100 stable/falco`\n\nThe main problem is that minikube doesn't resolve the service from apiserver,\nso that you need to specify the clusterIP.\n\nhttps://github.com/falcosecurity/falco/blob/dev/examples/k8s_audit_config/README.md\n\nSigned-off-by: Néstor Salceda <nestor.salceda@sysdig.com>\n\n* [stable/falco] Apiserver don't resolve internal services\n\nThat would be a layering violation so we are going to rely only con\nclusterIP and that parameter is required if we enable the webserver\nfeatures.\n\nhttps://kubernetes.io/docs/tasks/debug-application-cluster/audit/#url\n\nSigned-off-by: Néstor Salceda <nestor.salceda@sysdig.com>\n\n* [stable/falco] Document values and upgrade chart version\n\nThis is an 1.0.0 version, which means that Helm chart is feature\ncomplete in terms of we provide same functionality that daemonset\nprovides.\n\nIt's time to celebrate!\n\nSigned-off-by: Néstor Salceda <nestor.salceda@sysdig.com>\n\n* [stable/falco] Add a section in README for explaining K8s audit event support\n\nSigned-off-by: Néstor Salceda <nestor.salceda@sysdig.com>\n\n* [stable/falco] Write the README in a more actionable way\n\nTelling all the history about the Falco implementation of Audit Event\nrules is a bit useless here. It can be found on the awesome Falco\ndocumentation.\n\nHere I would like to focus a bit more on chart users and show them how\nto enable Falco with the audit events feature.\n\nSigned-off-by: Néstor Salceda <nestor.salceda@sysdig.com>\n\n* [stable/falco] Add instructions for choosing the clusterIP address\n\nAnd another option for not recognized resource is that we were using a\nK8s version previous to v1.13\n\nSigned-off-by: Néstor Salceda <nestor.salceda@sysdig.com>","distinct":true,"url":"https://api.github.com/repos/fabriziofortino/charts/commits/bd4c1a47b1f7ee1e2cb8f299e717afb61724bf02"},{"sha":"0ae518027609cad2a9326c9f1b5bdf834fe256cd","author":{"name":"André R. de Miranda","email":"bc9800b9d52a24cce72a73dd528afed53f10e5fc@miranda.work"},"message":"[stable/prometheus-operator] Updated the kube-state-metrics svc matchlabels (#15578)\n\n* Updated the kube-state-metrics svc matchlabels\n\nThe labels from kube-state-metrics service have been changed in commit: https://github.com/helm/charts/commit/ece06ce7535925760b901d630320b429524e6dea#diff-5683c47f1fce3f75f10401ba9b88815b\r\n\r\nSigned-off-by: André R. de Miranda <andre@miranda.work>\n\n* Bumped version\n\nSigned-off-by: André R. de Miranda <andre@miranda.work>\n\n* Changed jobLabel from app to app.kubernetes.io/name\n\nSigned-off-by: André R. de Miranda <andre@miranda.work>\n\n* Updated version of kube-state-metric dependency and regenerated the requeriments.lock\n\nSigned-off-by: André R. de Miranda <andre@miranda.work>\n\n* Added helm upgrade instruction in the README\n\nSigned-off-by: André R. de Miranda <andre@miranda.work>","distinct":true,"url":"https://api.github.com/repos/fabriziofortino/charts/commits/0ae518027609cad2a9326c9f1b5bdf834fe256cd"}]}
{"actor":{"display_login":"pull"}}