falco

README

How we added/built stand-alone tests for Falco

• git clone
• mkdir/falco
• cd falco/
• go mod init github.com/aws/aws-k8s-tester/k8s-tester/falco
• Create a file to implement the Tester Interface. touch tester.go
• copy a vend file from another package cp ../vend.sh .
• Write tests
• run ./vend.sh
• run go mod tidy -v

Test/Run singe test stand-alone

go run cmd/k8s-tester-falco/main.go apply \
    --kubectl-path="/usr/local/bin/kubectl" \
    --kubeconfig-path="/PATHTO/kubeconfig" \
    --log-outputs="falco.log"

## Delete
go run cmd/k8s-tester-falco/main.go delete \
    --kubectl-path="/usr/local/bin/kubectl" \
    --kubeconfig-path="/PATHTO/kubeconfig" \
    --log-outputs="falco.log"

Documentation

Overview

package falco installs Falco tester. ref. https://falco.org

Index

• Constants
• func Env() string
• func New(cfg *Config) k8s_tester.Tester
• type Config
  • func NewDefault() *Config
  • func (cfg *Config) ValidateAndSetDefaults() error

Constants

const (
	DefaultMinimumNodes     int = 1
	DefaultHelmChartRepoURL     = "https://github.com/falcosecurity/charts/releases/download/falco-1.13.1/falco-1.13.1.tgz"
)

Functions

func Env

func Env() string

func New

func New(cfg *Config) k8s_tester.Tester

Types

type Config

type Config struct {
	Enable bool `json:"enable"`
	Prompt bool `json:"-"`

	Stopc     chan struct{} `json:"-"`
	Logger    *zap.Logger   `json:"-"`
	LogWriter io.Writer     `json:"-"`
	Client    client.Client `json:"-"`

	// MinimumNodes is the minimum number of Kubernetes nodes required for installing this addon.
	MinimumNodes int `json:"minimum_nodes"`
	// HelmChartRepoURL is the helm chart repo URL.
	HelmChartRepoURL string `json:"helm_chart_repo_url"`
	// Namespace to create test resources.
	Namespace string `json:"namespace"`
}

func NewDefault

func NewDefault() *Config

func (*Config) ValidateAndSetDefaults

func (cfg *Config) ValidateAndSetDefaults() error