Posts in 2020
Detect CVE-2020-8557 using Falco
Wednesday, July 15, 2020 in The Falco blog
CVE-2020-8557 The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction manager when calculating ephemeral storage usage by a pod. If a pod writes a large amount of data to the /etc/hosts file, it could fill the storage …
Extend Falco outputs with falcosidekick
Monday, June 22, 2020 in The Falco blog
(2021-04-13) edit: update to integrate Falcosidekick-UI use last versions of Falco helm chart which embeds Falcosidekick as dependency By default, Falco has 5 outputs for its events: stdout, file, gRPC, shell and http. As you can see in the following …
Falco 0.23.0 a.k.a. "the artifacts scope release"
Monday, May 18, 2020 in The Falco blog
Another month has passed and Falco continues to grow! Today we announce the release of Falco 0.23 🥳 Wondering why this release is called "The Artifacts Scope" release? Please read more here. You can take a look at the whole set of changes …
The Scope of Falco
Monday, April 20, 2020 in The Falco blog
As The Falco Project continues to grow, we are begining to understand the differences in engagement and support for our tooling. Drawing on the history of the now deprecated Kubernetes incubator and the CNCF project maturity levels we began to …
Falco 0.22 a.k.a. "the hard fixes release"
Friday, April 17, 2020 in The Falco blog
Another month has passed and Falco continues to grow! Today we announce the release of Falco 0.22 🥳 You can take a look at the whole set of changes here: 0.22.0 - thanks to Leonardo Grasso for his first ever release! 0.22.1 - hotfix by me and …
Falco on Kind with Prometheus and Grafana
Thursday, March 19, 2020 in The Falco blog
Kind is a tool for running local Kubernetes clusters using Docker container "nodes", that may be used for local development or CI. It also offers a convenient and easy way to install Falco in a Kubernetes cluster and play with it locally. …
Falco 0.21.0 is out!
Wednesday, March 18, 2020 in The Falco blog
Even though there's the lockdown, Falco 0.21.0 decided to go out! Such a bad guy! Notably, this is the first release that happens with the new build & release process. 🚀 In case you just want Falco 0.21.0, you can find its packages at the …
Minikube 1.8.0 packages the Falco Kernel Module
Sunday, March 08, 2020 in The Falco blog
Minikube is a tool that implements a local Kubernetes cluster on macOS, Linux and Windows via a simple command line, it is vastly used by community members who want to try Falco as well by Falco contributors who want to develop and debug it against …
Falco 0.20.0 is released
Monday, February 24, 2020 in The Falco blog
We're pleased to announce the release of Falco 0.20.0, our second release of 2020! Falco 0.20.0 consists of a major bug fix, a new feature, two minor bug fixes, and seven rules changes. A total of eight people contributed to this release with a total …
Posts in 2019
Falco Security Audit
Monday, December 16, 2019 in The Falco blog
Regularly auditing a code base is an important process in releasing secure software. Audits can be particularly important for open source projects that rely on code from a wide variety of contributors. We are happy to announce the release of Falco’s …