Skip to content

Falco Driver Schema

Note

This is auto-generated documentation from a JSON schema that is under construction, this will improve over time.

Return to the root config schema

https://raw.githubusercontent.com/elastisys/compliantkubernetes-apps/v0.39.2/config/schemas/config.yaml#/properties/falco/properties/driver

Configuration for the Falco syscall driver used to collect events.

See the upstream documentation for more information.

Abstract Extensible Status Identifiable Custom Properties Additional Properties Access Restrictions Defined In
Can be instantiated No Unknown status No Forbidden Allowed none config/schemas/config.yaml*

TYPE:

object (Falco Driver)

PROPERTIES:

Property Type Required Nullable Defined by
kind string Optional cannot be null Compliant Kubernetes Apps Config

kind

kind

TYPE:

string (Falco Driver Kind)

CONSTRAINTS:

enum: the value of this property must be equal to one of the following values:

Value Explanation
"kmod" Kernel module (default)
"modern-bpf" Modern eBPF probe
"ebpf" Legacy eBPF probe

DEFAULTS:

The default value is:

"kmod"

Return to the root config schema


Generated Thu Nov 14 16:14:40 UTC 2024 from elastisys/compliantkubernetes-apps@v0.39.2