falco-app release v0.7.0

Changed

  • Updated Falco chart version from 3.3.0 to 3.8.1.
  • Updated Falco-exporter chart version from 0.9.6 to 0.9.7
  • Updated Falcosidekick chart version from 0.6.1 to 0.7.5
  • Updated Falco to upstream version 0.36.1.

Added

  • Added the use of Falcoctl.

Notes

Falco made some big changes in the way rules are distributed, categorized, and updated. For more information, check the Falco release notes. This means that we will ship Falco with fewer rules by default, as aligned with upstream. They have done this to give endusers a quieter default set of rules. They will now follow a standard, incubating, sandbox system. Before this update, all these rules were shipped by default. This means, that if CustomRules or macros were based on some rules which are now considered incubating or sandbox rules, they are now broken. This can be fixed by altering the configuration of falcoctl to also download and use the incubating and sandbox rules, or by rewriting your CustomRules. For more information, please check the falco rules page.

This part of our documentation refers to our vintage product. The content may be not valid anymore for our current product. Please check our new documentation hub for the latest state of our docs.