gardener / gardener-extension-shoot-falco-service

Gardener extension controller to deploy Falco into shoot clusters.
Apache License 2.0
0 stars 4 forks source link

Disable Falcosidekick #85

Open marwinski opened 3 weeks ago

marwinski commented 3 weeks ago

What would you like to be added:

Configure the Falco deployment to run without Falcosidekick. This means that the events are only stored in the Falco pod stdout log.

Why is this needed:

As a user I want to scrape Falco event logs myself and not rely on Falcosidekick to send events to an event store. This can be done today already, however events are still sent to a central event store.

lsroe commented 3 weeks ago

We could consider looking at fluent-bit/fluent-d. They also allow forwarding to a wide range of targets.