Falco Driver Schema¶
Note
This is auto-generated documentation from a JSON schema that is under construction, this will improve over time.
Return to the root config schema
https://raw.githubusercontent.com/elastisys/compliantkubernetes-apps/main/config/schemas/config.yaml#/properties/falco/properties/driver
Configuration for the Falco syscall driver used to collect events.
See the upstream documentation for more information.
| Abstract | Extensible | Status | Identifiable | Custom Properties | Additional Properties | Access Restrictions | Defined In |
|---|---|---|---|---|---|---|---|
| Can be instantiated | No | Unknown status | No | Forbidden | Allowed | none | config/schemas/config.yaml* |
TYPE:
object (Falco Driver)
PROPERTIES:
| Property | Type | Required | Nullable | Defined by |
|---|---|---|---|---|
| kind | string |
Optional | cannot be null | Welkin Apps Config |
kind¶
kind
-
is optional
-
Type:
string(Falco Driver Kind) -
cannot be null
-
defined in: Welkin Apps Config
TYPE:
string (Falco Driver Kind)
CONSTRAINTS:
enum: the value of this property must be equal to one of the following values:
| Value | Explanation |
|---|---|
"kmod" |
Kernel module (default) |
"modern-bpf" |
Modern eBPF probe |
"ebpf" |
Legacy eBPF probe |
DEFAULTS:
The default value is:
"kmod"
Return to the root config schema
Generated Thu Dec 19 03:51:01 UTC 2024 from elastisys/compliantkubernetes-apps@main