kuberhaus VS falco

Thanos - Highly available Prometheus setup with long term storage capabilities. CNCF Sandbox project. https://thanos.io Prometheus - The Prometheus monitoring system and time series database. Grafana - The tool for beautiful monitoring and metric analytics & dashboards for Graphite, InfluxDB & Prometheus & More Kubetail - Bash script to tail Kubernetes logs from multiple pods at the same time Searchlight - Alerts for Kubernetes linkerd2 Monitoring Mixin for Grafana - Grafana dashboards for linkerd2 monitoring and can work in standalone (default) or in multi cluster setup kuberhaus - Kubernetes resource dashboard with node/pod layout and resource requests Kubernetes Job/CronJob Notifier - This tool sends an alert to slack whenever there is a Kubernetes cronJob/Job failure/success Argus - This tool monitors changes in the filesystem on specified paths

https://github.com/falcosecurity/falco

Like snort, but looks at system calls.

From one noob to another - I had a lot of fun setting up Falco (https://falco.org) and creating custom policies & alerts.

Falco is a well-known open source security solution originally created by Sysdig. It’s a CNCF incubating project and one of the few (as far as I can tell) options on this list that uses eBPF to scan for vulnerabilities.

Use some kind of SIEM or Falco to alert you to threats (you can't stop them, but a human can always intervene)

Falco, is a security project that can help you detect threats from within your cluster.

https://falco.org/ is a security-focused monitoring and alerting with an eBPF option

On the cgo side I want to highlight two talks: one from Loris Cro about dealing with cross-complition difficulties, that the usage of cgo brings, using the Zig language and the other from Jason Dellaluce and Leonardo Grasso about how to extend Falco, a Kubernetes threat detection engine, which is written in C++, with plugins written in Go, explaining the challenges of integrating cgo in both C and Go.