From cf8e845b3ef86b52fbe5078f32b6f7ee05c00333 Mon Sep 17 00:00:00 2001 From: Anton Gilgur Date: Thu, 2 Nov 2017 17:58:31 -0700 Subject: [PATCH] use https://kubernetes.default instead of just https://kubernetes - otherwise it doesn't work if it's in a different namespace --- examples/k8s-using-daemonset/falco-daemonset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/examples/k8s-using-daemonset/falco-daemonset.yaml b/examples/k8s-using-daemonset/falco-daemonset.yaml index ea4a3ae6f98..01f1c8a8e2f 100644 --- a/examples/k8s-using-daemonset/falco-daemonset.yaml +++ b/examples/k8s-using-daemonset/falco-daemonset.yaml @@ -18,7 +18,7 @@ spec: image: sysdig/falco:latest securityContext: privileged: true - args: [ "/usr/bin/falco", "-K", "/var/run/secrets/kubernetes.io/serviceaccount/token", "-k", "https://kubernetes", "-pk", "-o", "json_output=true", "-o", "program_output.enabled=true", "-o", "program_output.program=jq '{text: .output}' | curl -d @- -X POST https://hooks.slack.com/services/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"] + args: [ "/usr/bin/falco", "-K", "/var/run/secrets/kubernetes.io/serviceaccount/token", "-k", "https://kubernetes.default", "-pk", "-o", "json_output=true", "-o", "program_output.enabled=true", "-o", "program_output.program=jq '{text: .output}' | curl -d @- -X POST https://hooks.slack.com/services/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"] volumeMounts: - mountPath: /host/var/run/docker.sock name: docker-socket