* [stable/falco] Add a parameter to use ISO8601 formatted dates
If true, the times displayed in log messages and output messages
will be in ISO 8601. By default, times are displayed in the local
time zone, as governed by /etc/localtime.
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* [stable/falco] Allow configuration for `syscall_event_drops` in falco.yaml
Falco uses a shared buffer between the kernel and userspace to pass
system call information. When falco detects that this buffer is
full and system calls have been dropped, it can take one or more of
the following actions:
- "ignore": do nothing. If an empty list is provided, ignore is assumed.
- "log": log a CRITICAL message noting that the buffer was full.
- "alert": emit a falco alert noting that the buffer was full.
- "exit": exit falco with a non-zero rc.
The rate at which log/alert messages are emitted is governed by a
token bucket. The rate corresponds to one message every 30 seconds
with a burst of 10 messages.
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* [stable/falco] Enable httpOutput section from the configmap
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* [stable/falco] Add CHANGELOG entry for 0.8.0
This was not done in [its own PR](https://github.com/helm/charts/pull/14813#issuecomment-506821432)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* [stable/falco] Bump version and add CHANGELOG entries
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>