Skip to content
    • Welcome to the Linux Foundation Forum!

    Lab 7.6 is Falco SSL cert required? and does it works with default k8s aduit rules ?

    Posts: 2
    in LFS260 Class Forum

    Since by default the SSL disabled do we really need to generate SSL CERT?
    i am trying to follow the Lab 7.5 instruction, until step 12 everything is ok, local events are processed but latter when we create aduit webhook , events are posted to falco webserver. but k8s aduit events are ignored by default falco rule. any idea why it is?

    Welcome!

    It looks like you're new here. Sign in or register to get started.
    Sign In

    Comments

    • Posts: 2

      its Working .i misconfigured the API endpoint. but still i am wondering the SSL CERT is mandatory ?

    • Posts: 1,000

      Hello,

      I'm unsure of your question, SSL CERT mandatory for what? I suppose it depends on which features one would plan on using, now or in the future.

      Regards,

    • Posts: 4

      We are setting ssl_enabled: true in /etc/falco/falco.yaml (which seems to have issues on its own on Ubuntu 18.04, see https://github.com/falcosecurity/falco/issues/1708 )

      1. webserver:
      2.    enabled: true
      3.    listen_port: 8765
      4.    k8s_audit_endpoint: /k8s-audit
      5.    ssl_enabled: true
      6.    ssl_certificate: /etc/falco/falco.pem

      I don't think we are expecting the http webhook in audit-webhook-config-file to still work against a falco webserver with https on?

      1. server: http://<host-ip-address>:8765/k8s-audit

      Are you planning to review the course materials, basically perform them by hand again forgetting the prior knowledge?
      There are multiple issues, resulting mostly from changes in various components, and there are also still small typos in the course. It appears not very well maintained.

    • Posts: 1,000

      Hello,

      Indeed, thank you for your feedback. I am in the process of running each step by hand. There are a lot of changes in the many components.

      Regards,

    Welcome!

    It looks like you're new here. Sign in or register to get started.
    Sign In

    Welcome!

    It looks like you're new here. Sign in or register to get started.
    Sign In

    Quick Links

    Categories

    Upcoming Training