Falco workflow & testing infrastructure
See the codeREADME
test-infra
GitHub Workflow & Testing Infrastructure
Cloud configuration
Infrastructure is separated by area and cloud:
| Area | AWS | OCI |
|---|---|---|
| Terraform | Cluster | Cluster |
| Applications | Applications | Applications |
| Prow | Configuration | Configuration |
| Prow jobs | Archived jobs | Active jobs |
AWS and OCI have independent Prow versions, configuration, and node scheduling. The OCI bootstrap is managed and validated locally, outside CI.
DBG
DBG stands for Drivers Build Grid.
It's a tool that we created to prebuilt a set of Falco drivers (both kernel module and eBPF probe) for various target distro and kernel releases, by using driverkit.
You can find more about it here.
Contribute
You can contribute in order to distribute prebuilt Falco drivers for new Linux kernel releases by following this guide.
Prow
Prow is a CI/CD system running on Kubernetes.
This directory contains the resources composing the Falco's workflow & testing infrastructure.
Are you looking for Deck to check the merge queue and prow jobs?
Adding a Job on Prow
Add job definitions to the OCI catalog and include them in its Kustomization.
- Presubmits run against pull requests: DBG validation.
- Postsubmits run after changes are pushed: driver builds.
- Periodics run on a schedule: DBG updates.
Use the workload's existing service account, resource requests, node selectors and tolerations as references. The AWS job definitions are archived and are not part of the active catalog.
Similar repos
Falco workflow & testing infrastructure
See the codeREADME
test-infra
GitHub Workflow & Testing Infrastructure
Cloud configuration
Infrastructure is separated by area and cloud:
| Area | AWS | OCI |
|---|---|---|
| Terraform | Cluster | Cluster |
| Applications | Applications | Applications |
| Prow | Configuration | Configuration |
| Prow jobs | Archived jobs | Active jobs |
AWS and OCI have independent Prow versions, configuration, and node scheduling. The OCI bootstrap is managed and validated locally, outside CI.
DBG
DBG stands for Drivers Build Grid.
It's a tool that we created to prebuilt a set of Falco drivers (both kernel module and eBPF probe) for various target distro and kernel releases, by using driverkit.
You can find more about it here.
Contribute
You can contribute in order to distribute prebuilt Falco drivers for new Linux kernel releases by following this guide.
Prow
Prow is a CI/CD system running on Kubernetes.
This directory contains the resources composing the Falco's workflow & testing infrastructure.
Are you looking for Deck to check the merge queue and prow jobs?
Adding a Job on Prow
Add job definitions to the OCI catalog and include them in its Kustomization.
- Presubmits run against pull requests: DBG validation.
- Postsubmits run after changes are pushed: driver builds.
- Periodics run on a schedule: DBG updates.
Use the workload's existing service account, resource requests, node selectors and tolerations as references. The AWS job definitions are archived and are not part of the active catalog.