Skip to content

Releases: falcosecurity/falcoctl

v0.3.0-rc1

18 Jan 09:46
@FedeDP FedeDP
v0.3.0-rc1
867d7ce
Compare
Choose a tag to compare
v0.3.0-rc1 Pre-release
Pre-release

Changelog

  • 738e43f: new(docs): add installation instructions (@alacuku)
  • b572636: new(docs): add docs for the falcoctl tool (@alacuku)
  • 713be47: feature(cmd): add new global flag --disable-styling (@alacuku)
  • ddae9b6: update(ci): use -ldflags="-s -w" when building falcoctl (@alacuku)
  • fc322ac: new(Dockerfile): introduce Dockerfile for falcoctl (@alacuku)
  • 93d4a3d: new(CI): build and push docker images when releasing a new version (@alacuku)
  • 8752ed5: refactor(cmd): remove duplicated code when creating pullers and pushers (@alacuku)
  • 9168358: fix(build): use new-style GCI CLI (@LucaGuerra)
  • cf1e1ad: update(build): update GCI to 0.9.0 (@LucaGuerra)
  • 309c5ef: update(output): add new methods to the printer (@alacuku)
  • b4e66d9: refactor(cmd/internal): move package utils from cmd/internal to internal (@alacuku)
  • 4489ef0: refactor(cmd/artifact): move artifact subcommands from cmd to internal/artifact (@alacuku)
  • a6c2655: refactor(cmd/index): move index subcommands from cmd to internal/index (@alacuku)
  • 7a47783: refactor(cmd/registry): move registry subcommands from cmd to internal/registry (@alacuku)
  • b5eb8e5: refactor(cmd/tls): move tls subcommands from cmd to internal/tls (@alacuku)
  • 4fe0e84: refactor(pkg/version): move version command from cmd to internal/version (@alacuku)
  • 20ff37f: cleanup(cmd/root) remove unused variables (@alacuku)
  • 19a4ab7: chore(artifact/install): move default paths for plugins and rulesfiles to internal/config package (@alacuku)
  • aedee8f: update(internal/utils): return full path of the extracted files in ExtractTarGz func (@alacuku)
  • a2efb4a: update(output/tracker): return a nil tracker if the printer is nil (@alacuku)
  • c189eb0: update(CI): add floating tags to docker image based on major and minor version numbers of a release (@alacuku)
  • 47045d5: new(pkg/oci): use functional options for creating repositories (@loresuso)
  • 744ada5: update(pkg/oci): adapt creation of repositories with functional options (@loresuso)
  • b33f6a8: feat(oci/puller): add Descriptor method to retrieve artifacts' descriptor (@alacuku)
  • 93d0fe8: feat(internal/validate): add new helper to extract the TAG from an artifacts' reference (@alacuku)
  • 084ac34: new(internal/follower): add Follower type and related package (@alacuku)
  • 0eac03c: feat(artifact/follow): add new command "artifact follow" (@alacuku)
  • ca7e5d6: new(cmd/artifact): add the follow subcommand to the artifact command (@alacuku)
  • 4ad4a3e: chore(cmd/root): print log messagge when a termination signal is received (@alacuku)
  • 1a41d32: fix(pkg): create repo with functional options and fix main branch error (@loresuso)
  • f566ad6: chore: improve error messages in Login and ClientForRegistry (@loresuso)
  • f1005d0: docs: switch ref and file in push short usage (@loresuso)
  • 3acd4fc: new(cmd): add artifact type to search (@LucaGuerra)
  • ed240e9: new(cmd): add falcoctl artifact list (@LucaGuerra)
  • 2e8c023: fix(cmd): clarify artifact types (@LucaGuerra)
  • 49b4ed6: update: add oauth2 dependency (@loresuso)
  • 5c4e575: new(cmd): implement oauth client credential flow (@loresuso)
  • 3c3a90e: update(internal/registry): add possibility store access token (@loresuso)
  • 3616fc7: update: reworking client creation to accommodate oauth (@loresuso)
  • 983a593: refactor: use functional options to create http client (@loresuso)
  • 04dd860: update: add logic to store and retrieve client credentials (@loresuso)
  • c94ca13: refactor: start using oauth in the *ForRegistry function (@loresuso)
  • 48ead1b: update: add options for oauth and plain http for pusher and puller (@loresuso)
  • 4e6ea2a: update: introduce registry and repository package (@loresuso)
  • 57bf41f: refactor: make use of the new registry type (@loresuso)
  • f5ebdce: refactor: move responsability of listing tag to repository struct (@loresuso)
  • c424401: refactor: create client with correct method and use repository.Tags in artifact info (@loresuso)
  • d894fc7: update: port oauth and plain-http flags to artifact commands (@loresuso)
  • 484ec0c: chore: please the linter (@loresuso)
  • 57f13b1: refactor: bring check on v2 API in registry package (@loresuso)
  • 0ebee0c: chore: use default tag concurrency equal to 1 (@loresuso)
  • 364102b: refactor(oci/client): avoid yet another wrapper for the oci client (@alacuku)
  • 1f6a9ee: fix: correctly remove temp files when pushing (@loresuso)
  • fe5e90c: fix(pkg/oci/repository): do not error when parsing semver tags that do not strictly adhere to semver (@alacuku)
  • cfcf917: update(pkg/oci): add requirements concept to artifact config (@leogr)
  • 116b194: refactor: artifact config with requirements (@leogr)
  • 3cc43d9: update: add artifact name in artifact config (@leogr)
  • aa4d4ca: update: add artifact name in artifact config (@leogr)
  • 1f8a346: chore(pkg/oci): fix typo in function name (@alacuku)
  • fa51ff0: fix(linting): remove hugeParam warning (@alacuku)
  • a8cf20a: fix(pkg/ogi): allow the alternatives when setting a dependency in the artifact config (@alacuku)
  • e9b93d3: fix(ci): use main branch instead of master in codeql workflow (@alacuku)
  • 4c4cd3d: chore(ci): bump codeql version to v2 (@alacuku)
  • f883f38: chore: don't use logrus as logger (@loresuso)
  • b57196b: chore: use const when possible (@loresuso)
  • a7e5058: update: add alias ls to artifact list command (@loresuso)
  • 6046fd4: new(internal/artifact/install): introduce a function to resolve dependencies between artifacts (@loresuso)
  • 65d6f5c: test(internal/artifact/install): test artifact dependencies resolution (@loresuso)
  • 01dcba1: new(pkg/oci/puller): introduce a new function to retrieve config layer of an artifact (@loresuso)
  • 9ed9f66: upddate(internal/artifact/install): make use of resolve deps functionality in the artifact install command (@loresuso)
  • a0cfff1: chore: fix linter issues (@loresuso)
  • 16b8745: chore: address minor comments (@loresuso)
  • 8d8808c: update: get name directly from config layer. (@loresuso)
  • 0a1e73f: update: make artifact commands use a configuration file to enable feed feature (@loresuso)
  • bca2e11: update: make sure to load config file only on commands that need it (@loresuso)
  • fa7b5e6: update: load config values in artifact related commands (@loresuso)
  • 71c678c: update: remove unnecessary oauth flag (@loresuso)
  • 70f331d: update: load config in index related commands (@loresuso)
  • 665aba5: update: bump linter version (@loresuso)
  • 27145c3: update: correct way to handle oauth credentials using registry name as key (@loresuso)
  • 582a638: update: add logic to handle config file with viper (@loresuso)
  • a3fa21d: update: update testdata to pass tests (@loresuso)
  • 5954486: fix: ensure all directories exists using MkdirAll (@loresuso)
  • b875332: fix: let client for registry use empty credentials if any credential was found (@loresuso)
  • 6880e5e: fix: ensure options are always initialized (@loresuso)
  • 175f565: fix: falco is returning a string for all versions (@loresuso)
  • 867d7ce: fix: create config file directory if needed (@loresuso)

Contributors

leogr, alacuku, and 2 other contributors
Assets 11
Loading

v0.2.0-rc1

20 Oct 10:54
@leogr leogr
v0.2.0-rc1
1e22e2d
Compare
Choose a tag to compare
v0.2.0-rc1 Pre-release
Pre-release

Changelog

Read more

Contributors

leogr, jasondellaluce, and 4 other contributors
Assets 11
Loading

v0.1.0

15 Jul 09:00
@leogr leogr
v0.1.0
80ee501
Compare
Choose a tag to compare
v0.1.0

Changelog

80ee501 update: remove rajibmitra from OWNERS
854ef9a refactor(cmd): cleanup rootCmd wrapper
16428bb chore: temporarily disable test race
9ce591e update(cmd/testdata): test help command and flag
05c786b new(cmd): CLI tests
83ddbd4 new(cmd/testdata): CLI fixtures
6a4915e update(cmd): wrap root command
e21c17f deps: go modules
0fe2a2b fix(.circleci): correct typo in config path
f90860c fix(Makefile): correct target name
7dc1415 chore: initial circleci configuration just for testing
0bb8d91 new: add makefile
0b7ff21 fix(pkg/kubernetes): add missing formatting directive
6f96074 refactor(cmd): improve PersistentPreRun
34c4afd chore: update deps
73e1479 fix(cmd): automatically fallback flags to ENV and config file
3fefd44 chore(cmd): cleanup IOStreams from options
311b704 chore(cmd): init kube flags only when needed
f9b9f8d chore(cmd): basic config options with validation
4e5c20d refactor(pkg/tls): simplified TLS implementation
38e19ac fix(cmd): correct error handling in PSP conversion func
ec60f49 fix(cmd): correct misspelled words
58e262b fix: apply gofmt
4b5ec61 refactor(pkg/rules): remove unused package
d4ff33c refactor(pkg/cli): remove unused package
25187c4 fix(pkg/tls): correct dir permission bits
d14b2a6 fix(cmd): correct undefined func calls
577d22a docs: logo from community repo + refinements to README
1ee329e docs: adding logo to README.md
885d6d5 chore(cmd): rename probeloader to kernelmoduleloader
b0d030c refactor: Use apierrors package
3a3f5be Create auditsink resource idempotently
3834c07 refactored pkg directory inline with go idiomatic practices
104f6a0 refactored pkg directory inline with go idiomatic practices
0b592a6 refactored cmd package inline with go idiomatic practices
389b00c Removing ds.yaml
d2363a2 Adding basic README.md content
5969b1d fix(cmd): typo in install tls command
ab01b4e update: add leogr to OWNERS file
820f637 new(pkg/tls): generate client key/cert
69e20d6 fix(pkg/tls): set default expiration to 356 days
be0bd2b fix(pkg/tls): correct CN default, subject name and add missing CA extensions
037c951 fix(pkg/tls): correct server cert signing
a45142d fix(pkg/tls): do not get basedir of the certs path
7d450ed fix(cmd): search for env var, if missing fallback to default value correctly
cd4ba67 Add cleanup for cr, crb and auditsink
a5e1b4a Update appsv1beta2 -> appsv1
a52449d Interface for processes
2726966 update(cmd): install rule skeleton
8026504 docs(pkg/rules): license header
dedf40e fix(cmd): stop exec when TLS errors out
5df43d6 fix(cmd): help messages for TLS commands
d1e20ac adding changes
b4457a4 More work on the Kubernetes package
4159403 Commit at the airport, working on fixing install and stubbing out Falco object
941c569 Few cleanup items
475807c Adding TLS generation for Falcoctl

Assets 9
Loading

v0.0.7

07 Nov 16:18
@mstemm mstemm
v0.0.7
c4493b3
Compare
Choose a tag to compare
v0.0.7

Changelog

c4493b3 Add ability to limit generated rules to namespaces

Assets 9
Loading

v0.0.6

31 Oct 16:00
@mstemm mstemm
v0.0.6
4ca37e8
Compare
Choose a tag to compare
v0.0.6

Changelog

4ca37e8 update: prerun check for install probe command
563e9dd fix(cmd): falco version is mandatory (and has no default) for install probe command
84af345 Limit syscall activity for psp rules to containers
2595a4c Parse PSPs strictly, disallowing unknown fields

Assets 9
Loading

v0.0.6-rc.0

31 Oct 15:56
@mstemm mstemm
v0.0.6-rc.0
4ca37e8
Compare
Choose a tag to compare
v0.0.6-rc.0 Pre-release
Pre-release

Changelog

4ca37e8 update: prerun check for install probe command
563e9dd fix(cmd): falco version is mandatory (and has no default) for install probe command
84af345 Limit syscall activity for psp rules to containers
2595a4c Parse PSPs strictly, disallowing unknown fields

Assets 9
Loading

v0.0.5

28 Oct 14:16
@leodido leodido
v0.0.5
87a0cd0
Compare
Choose a tag to compare
v0.0.5

Changelog

87a0cd0 fix: not releasing docker images for falcoctl
48f59d5 docs: release markdown fixes
a316d0f build: ignore dist directory
be026df build: releases using goreleaser
2b7319d build: allow falcoctl to be built on non-linux machines by disabling the probe loader on GOOS != linux

Assets 9
Loading

v0.0.4

24 Oct 18:18
@mstemm mstemm
v0.0.4
cb0a194
Compare
Choose a tag to compare
v0.0.4

Summary

This release builds on v0.0.3, adding some safeguards to handle spaces/dashes in name prefixes when generating rules from PSPs.

Assets 4
Loading

v0.0.3

22 Oct 23:03
@mstemm mstemm
v0.0.3
f82c27e
Compare
Choose a tag to compare
v0.0.3

Summary

This release has a minor change to support prefixes in rules/macros/lists/rule names when generating rules from PSPs.

Assets 4
Loading

With PSP Conversion Support

14 Oct 18:02
@mstemm mstemm
v0.0.2
02333bf
Compare
Choose a tag to compare
With PSP Conversion Support

This release refactors command support to use commands/subcommands like you would find in tools like kubectl. Here's the output for falcoctl help:

./falcoctl help
The main control tool for running Falco in Kubernetes, ...

Usage:
  falcoctl
  falcoctl [command]

Available Commands:
  convert     Conversion helpers
  delete      Delete a component wih falcoctl
  help        Help about any command
  install     Install a component wih falcoctl

Flags:
      --as string                      Username to impersonate for the operation
      --as-group stringArray           Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
      --cache-dir string               Default HTTP cache directory (default "/Users/mstemm/.kube/http-cache")
      --certificate-authority string   Path to a cert file for the certificate authority
      --client-certificate string      Path to a client certificate file for TLS
      --client-key string              Path to a client key file for TLS
      --cluster string                 The name of the kubeconfig cluster to use
      --context string                 The name of the kubeconfig context to use
  -f, --fab                            Enable rainbow logs
  -h, --help                           help for falcoctl
      --insecure-skip-tls-verify       If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
      --kubeconfig string              Path to the kubeconfig file to use for CLI requests.
      --match-server-version           Require server version to match client version
  -n, --namespace string               If present, the namespace scope for this CLI request
      --request-timeout string         The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
  -s, --server string                  The address and port of the Kubernetes API server
      --token string                   Bearer token for authentication to the API server
      --user string                    The name of the kubeconfig user to use

Use "falcoctl [command] --help" for more information about a command.

It also adds support for a falcoctl convert psp subcommand which allows converting a K8s Pod Security Policy (PSP) to a set of falco rules that evaluate the conditions in the PSP.

Assets 4
Loading