search

falcosecurity / event-generator

Generate a variety of suspect actions that are detected by Falco rulesets
Apache License 2.0
87 stars 37 forks source link

event-generator launched through helm chart, can't run k8saudit tests #212

Open alfredomagallon opened 3 months ago

alfredomagallon commented 3 months ago

Describe the bug

I tried to launch event-generator using helm in order to test the k8saudit events:

  helm install event-generator-k8saudits falcosecurity/event-generator \
    --namespace event-generator \
    --create-namespace \
    --set config.grpc.enabled=true \
    --set config.command="test" \
    --set config.loop=false \
    --set config.actions="^k8saudit"

however, that results in the following error:

Error: none of the selected actions is enabled
FATA error executing event-generator               error="none of the selected actions is enabled"

How to reproduce it

Setup a kind cluster Enable k8s audit logs Setup falco Setup event-generator using the command above

Expected behaviour

Valid k8saudit events should be tested

Environment

poiana commented 2 weeks ago

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale