Deploy Falco for runtime detection and Kyverno for admission policies #55

New issue

Open

opened 2025-09-01 14:25:23 +00:00 by chris · 0 comments

chris commented

2025-09-01 14:25:23 +00:00

Owner

Description

Deploy Falco to detect suspicious container behavior and forward alerts to Loki/Alertmanager.
Deploy Kyverno to enforce PodSecurity (deny privileged, hostPath, etc.) and reject non-compliant pods.

Priority: P1
Estimate: 10 hours
Acceptance criteria

Kyverno policies applied and block offending pods during tests.
Falco detects & alerts on simulated suspicious behavior (e.g., shell exec in webserver container).

Description - Deploy Falco to detect suspicious container behavior and forward alerts to Loki/Alertmanager. - Deploy Kyverno to enforce PodSecurity (deny privileged, hostPath, etc.) and reject non-compliant pods. Priority: P1 Estimate: 10 hours Acceptance criteria - Kyverno policies applied and block offending pods during tests. - Falco detects & alerts on simulated suspicious behavior (e.g., shell exec in webserver container).