From 346b856f729c6ccff23dd7e0f12a168f4ef42ecc Mon Sep 17 00:00:00 2001 From: Lorenzo Fontana Date: Fri, 23 Oct 2020 02:50:51 +0200 Subject: [PATCH 01/72] new(config/distribution): s3 bucket Signed-off-by: Lorenzo Fontana --- distrubution/.gitignore | 3 +++ distrubution/distribution.tf | 9 +++++++++ distrubution/distribution.tfvars | 3 +++ distrubution/providers.tf | 15 +++++++++++++++ distrubution/variables.tf | 9 +++++++++ 5 files changed, 39 insertions(+) create mode 100644 distrubution/.gitignore create mode 100644 distrubution/distribution.tf create mode 100644 distrubution/distribution.tfvars create mode 100644 distrubution/providers.tf create mode 100644 distrubution/variables.tf diff --git a/distrubution/.gitignore b/distrubution/.gitignore new file mode 100644 index 00000000..68195e28 --- /dev/null +++ b/distrubution/.gitignore @@ -0,0 +1,3 @@ +.terraform +*.tfstate +*.tfstate* diff --git a/distrubution/distribution.tf b/distrubution/distribution.tf new file mode 100644 index 00000000..8ea4c1b1 --- /dev/null +++ b/distrubution/distribution.tf @@ -0,0 +1,9 @@ +resource "aws_s3_bucket" "distribution_bucket" { + bucket = var.bucket_name + acl = "public-read" + + tags = { + Name = var.bucket_name + } +} + diff --git a/distrubution/distribution.tfvars b/distrubution/distribution.tfvars new file mode 100644 index 00000000..93c44ed8 --- /dev/null +++ b/distrubution/distribution.tfvars @@ -0,0 +1,3 @@ +bucket_name = "falco-distribution" +region = "eu-west-1" + diff --git a/distrubution/providers.tf b/distrubution/providers.tf new file mode 100644 index 00000000..1c0672be --- /dev/null +++ b/distrubution/providers.tf @@ -0,0 +1,15 @@ +terraform { + required_providers { + aws = { + source = "hashicorp/aws" + version = "~> 3.0" + } + } +} + +provider "aws" { + version = ">= 3.0" + region = "eu-west-1" + shared_credentials_file = "~/.aws/credentials" + profile = "default" +} diff --git a/distrubution/variables.tf b/distrubution/variables.tf new file mode 100644 index 00000000..6749202c --- /dev/null +++ b/distrubution/variables.tf @@ -0,0 +1,9 @@ +variable "bucket_name" { + type = string + default = "falco-distribution" +} + +variable "region" { + type = string + default = "eu-west-1" +} From 7da9376649a15a25ca3e05b560fe705becb47fcc Mon Sep 17 00:00:00 2001 From: Lorenzo Fontana Date: Fri, 23 Oct 2020 17:28:15 +0200 Subject: [PATCH 02/72] update(config/distribution): cloudfront Signed-off-by: Lorenzo Fontana --- distrubution/distribution.tf | 60 ++++++++++++++++++++++++++++++++ distrubution/distribution.tfvars | 8 +++-- distrubution/variables.tf | 15 ++++++++ 3 files changed, 80 insertions(+), 3 deletions(-) diff --git a/distrubution/distribution.tf b/distrubution/distribution.tf index 8ea4c1b1..959eef41 100644 --- a/distrubution/distribution.tf +++ b/distrubution/distribution.tf @@ -7,3 +7,63 @@ resource "aws_s3_bucket" "distribution_bucket" { } } +resource "aws_s3_bucket" "logging_bucket" { + bucket = var.logging_bucket_name + acl = "private" + + tags = { + Name = var.logging_bucket_name + } +} + +resource "aws_cloudfront_distribution" "distribution" { + origin { + domain_name = aws_s3_bucket.distribution_bucket.bucket_regional_domain_name + origin_id = var.distribution_origin_id + } + + enabled = true + is_ipv6_enabled = true + comment = "Falco distribution channel" + default_root_object = "index.html" + + logging_config { + include_cookies = false + bucket = "${var.logging_bucket_name}.s3.amazonaws.com" + prefix = "falco-distribution" + } + + # todo(fntlnz): open a CNCF service account ticket to get the CNAME done and figure out a certificate we can use. + # aliases = var.distribution_name_aliases + + default_cache_behavior { + allowed_methods = ["GET", "HEAD"] + cached_methods = ["GET", "HEAD"] + target_origin_id = var.distribution_origin_id + + forwarded_values { + query_string = false + + cookies { + forward = "none" + } + } + + viewer_protocol_policy = "allow-all" + min_ttl = 0 + default_ttl = 3600 + max_ttl = 86400 + } + + price_class = "PriceClass_All" + + restrictions { + geo_restriction { + restriction_type = "none" + } + } + + viewer_certificate { + cloudfront_default_certificate = true + } +} diff --git a/distrubution/distribution.tfvars b/distrubution/distribution.tfvars index 93c44ed8..248469a1 100644 --- a/distrubution/distribution.tfvars +++ b/distrubution/distribution.tfvars @@ -1,3 +1,5 @@ -bucket_name = "falco-distribution" -region = "eu-west-1" - +bucket_name = "falco-distribution" +region = "eu-west-1" +distribution_origin_id = "falcoDistributionOrigin" +logging_bucket_name = "logging-falco-distribution" +distribution_name_aliases = "download.falco.org" diff --git a/distrubution/variables.tf b/distrubution/variables.tf index 6749202c..0e63c7f3 100644 --- a/distrubution/variables.tf +++ b/distrubution/variables.tf @@ -3,7 +3,22 @@ variable "bucket_name" { default = "falco-distribution" } +variable "logging_bucket_name" { + type = string + default = "logging-falco-distribution" +} + variable "region" { type = string default = "eu-west-1" } + +variable "distribution_origin_id" { + type = string + default = "falcoDistributionOrigin" +} + +variable "distribution_name_aliases" { + type = list(string) + default = ["download.falco.org"] +} From 8aa8dfc6026d9f2da1548a019a8bf64af4145466 Mon Sep 17 00:00:00 2001 From: Lorenzo Fontana Date: Fri, 23 Oct 2020 22:16:50 +0200 Subject: [PATCH 03/72] update(config/distribution): aws us region for keeping the cert manager certificate Signed-off-by: Lorenzo Fontana --- distrubution/distribution.tf | 16 +++++++++++++--- distrubution/distribution.tfvars | 2 +- distrubution/providers.tf | 9 +++++++++ distrubution/variables.tf | 6 +++--- 4 files changed, 26 insertions(+), 7 deletions(-) diff --git a/distrubution/distribution.tf b/distrubution/distribution.tf index 959eef41..4778b9ba 100644 --- a/distrubution/distribution.tf +++ b/distrubution/distribution.tf @@ -16,6 +16,16 @@ resource "aws_s3_bucket" "logging_bucket" { } } +resource "aws_acm_certificate" "cert" { + domain_name = var.distribution_name_alias + validation_method = "DNS" + provider = aws.us + + lifecycle { + create_before_destroy = true + } +} + resource "aws_cloudfront_distribution" "distribution" { origin { domain_name = aws_s3_bucket.distribution_bucket.bucket_regional_domain_name @@ -33,8 +43,7 @@ resource "aws_cloudfront_distribution" "distribution" { prefix = "falco-distribution" } - # todo(fntlnz): open a CNCF service account ticket to get the CNAME done and figure out a certificate we can use. - # aliases = var.distribution_name_aliases + aliases = [var.distribution_name_alias] default_cache_behavior { allowed_methods = ["GET", "HEAD"] @@ -64,6 +73,7 @@ resource "aws_cloudfront_distribution" "distribution" { } viewer_certificate { - cloudfront_default_certificate = true + acm_certificate_arn = aws_acm_certificate.cert.arn + ssl_support_method = "sni-only" } } diff --git a/distrubution/distribution.tfvars b/distrubution/distribution.tfvars index 248469a1..cf30a47d 100644 --- a/distrubution/distribution.tfvars +++ b/distrubution/distribution.tfvars @@ -2,4 +2,4 @@ bucket_name = "falco-distribution" region = "eu-west-1" distribution_origin_id = "falcoDistributionOrigin" logging_bucket_name = "logging-falco-distribution" -distribution_name_aliases = "download.falco.org" +distribution_name_alias = "download.falco.org" diff --git a/distrubution/providers.tf b/distrubution/providers.tf index 1c0672be..fce20e75 100644 --- a/distrubution/providers.tf +++ b/distrubution/providers.tf @@ -13,3 +13,12 @@ provider "aws" { shared_credentials_file = "~/.aws/credentials" profile = "default" } + +provider "aws" { + version = ">= 3.0" + alias = "us" + region = "us-east-1" + shared_credentials_file = "~/.aws/credentials" + profile = "default" +} + diff --git a/distrubution/variables.tf b/distrubution/variables.tf index 0e63c7f3..487c8fc3 100644 --- a/distrubution/variables.tf +++ b/distrubution/variables.tf @@ -18,7 +18,7 @@ variable "distribution_origin_id" { default = "falcoDistributionOrigin" } -variable "distribution_name_aliases" { - type = list(string) - default = ["download.falco.org"] +variable "distribution_name_alias" { + type = string + default = "download.falco.org" } From 81cc5443c3e8b2efe3f7af975829d043a37f3520 Mon Sep 17 00:00:00 2001 From: Lorenzo Fontana Date: Mon, 26 Oct 2020 14:07:52 +0100 Subject: [PATCH 04/72] update(config/distribution): apply terraform formatting from language server Signed-off-by: Lorenzo Fontana --- distrubution/distribution.tf | 6 +++--- distrubution/variables.tf | 10 +++++----- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/distrubution/distribution.tf b/distrubution/distribution.tf index 4778b9ba..aca505f1 100644 --- a/distrubution/distribution.tf +++ b/distrubution/distribution.tf @@ -3,7 +3,7 @@ resource "aws_s3_bucket" "distribution_bucket" { acl = "public-read" tags = { - Name = var.bucket_name + Name = var.bucket_name } } @@ -12,14 +12,14 @@ resource "aws_s3_bucket" "logging_bucket" { acl = "private" tags = { - Name = var.logging_bucket_name + Name = var.logging_bucket_name } } resource "aws_acm_certificate" "cert" { domain_name = var.distribution_name_alias validation_method = "DNS" - provider = aws.us + provider = aws.us lifecycle { create_before_destroy = true diff --git a/distrubution/variables.tf b/distrubution/variables.tf index 487c8fc3..e045d839 100644 --- a/distrubution/variables.tf +++ b/distrubution/variables.tf @@ -1,24 +1,24 @@ variable "bucket_name" { - type = string + type = string default = "falco-distribution" } variable "logging_bucket_name" { - type = string + type = string default = "logging-falco-distribution" } variable "region" { - type = string + type = string default = "eu-west-1" } variable "distribution_origin_id" { - type = string + type = string default = "falcoDistributionOrigin" } variable "distribution_name_alias" { - type = string + type = string default = "download.falco.org" } From 7acb9ee0915227130bea01a4e78d232f37c79083 Mon Sep 17 00:00:00 2001 From: Lorenzo Fontana Date: Mon, 26 Oct 2020 14:25:07 +0100 Subject: [PATCH 05/72] update(config/distribution): apply the old viewer certificates to cloudfront until we have the DNS made right Signed-off-by: Lorenzo Fontana --- distrubution/README.md | 11 +++++++ distrubution/distribution.tf | 30 +++++++++++-------- ...tion.tfvars => distribution.tfvars.sample} | 0 3 files changed, 29 insertions(+), 12 deletions(-) create mode 100644 distrubution/README.md rename distrubution/{distribution.tfvars => distribution.tfvars.sample} (100%) diff --git a/distrubution/README.md b/distrubution/README.md new file mode 100644 index 00000000..8f62d20d --- /dev/null +++ b/distrubution/README.md @@ -0,0 +1,11 @@ +# Falco artifacts on S3 + +This repo contains an infrastructure implementation to host Falco distribution artifacts +on Amazon S3. + +Proposals related to this document: + +- https://github.com/falcosecurity/falco/blob/master/proposals/20201025-drivers-storage-s3.md + +TODO: we need to back the Terraform state to s3 too and write instructions on how to apply +the same way we have for the EKS clusters in [PR#198](https://github.com/falcosecurity/test-infra/pull/198/files) diff --git a/distrubution/distribution.tf b/distrubution/distribution.tf index aca505f1..4f528637 100644 --- a/distrubution/distribution.tf +++ b/distrubution/distribution.tf @@ -16,15 +16,17 @@ resource "aws_s3_bucket" "logging_bucket" { } } -resource "aws_acm_certificate" "cert" { - domain_name = var.distribution_name_alias - validation_method = "DNS" - provider = aws.us - - lifecycle { - create_before_destroy = true - } -} +# todo(fntlnz): enable this once the CNAME is handled on the CNCF's DNS. +# also re-enable aliases and viewer_certificate in the Cloudfront distribution. +# resource "aws_acm_certificate" "cert" { +# domain_name = var.distribution_name_alias +# validation_method = "DNS" +# provider = aws.us + +# lifecycle { +# create_before_destroy = true +# } +# } resource "aws_cloudfront_distribution" "distribution" { origin { @@ -43,7 +45,7 @@ resource "aws_cloudfront_distribution" "distribution" { prefix = "falco-distribution" } - aliases = [var.distribution_name_alias] + # aliases = [var.distribution_name_alias] default_cache_behavior { allowed_methods = ["GET", "HEAD"] @@ -72,8 +74,12 @@ resource "aws_cloudfront_distribution" "distribution" { } } + # viewer_certificate { + # acm_certificate_arn = aws_acm_certificate.cert.arn + # ssl_support_method = "sni-only" + # } + viewer_certificate { - acm_certificate_arn = aws_acm_certificate.cert.arn - ssl_support_method = "sni-only" + cloudfront_default_certificate = true } } diff --git a/distrubution/distribution.tfvars b/distrubution/distribution.tfvars.sample similarity index 100% rename from distrubution/distribution.tfvars rename to distrubution/distribution.tfvars.sample From c3e6818d49ac3d8578a7e89375e766e239a1ee5a Mon Sep 17 00:00:00 2001 From: Leonardo Di Donato Date: Mon, 26 Oct 2020 16:41:02 +0100 Subject: [PATCH 06/72] chore(config): distribution directory typo Signed-off-by: Leonardo Di Donato --- distrubution/.gitignore | 3 - distrubution/README.md | 11 ---- distrubution/distribution.tf | 85 ------------------------- distrubution/distribution.tfvars.sample | 5 -- distrubution/providers.tf | 24 ------- distrubution/variables.tf | 24 ------- 6 files changed, 152 deletions(-) delete mode 100644 distrubution/.gitignore delete mode 100644 distrubution/README.md delete mode 100644 distrubution/distribution.tf delete mode 100644 distrubution/distribution.tfvars.sample delete mode 100644 distrubution/providers.tf delete mode 100644 distrubution/variables.tf diff --git a/distrubution/.gitignore b/distrubution/.gitignore deleted file mode 100644 index 68195e28..00000000 --- a/distrubution/.gitignore +++ /dev/null @@ -1,3 +0,0 @@ -.terraform -*.tfstate -*.tfstate* diff --git a/distrubution/README.md b/distrubution/README.md deleted file mode 100644 index 8f62d20d..00000000 --- a/distrubution/README.md +++ /dev/null @@ -1,11 +0,0 @@ -# Falco artifacts on S3 - -This repo contains an infrastructure implementation to host Falco distribution artifacts -on Amazon S3. - -Proposals related to this document: - -- https://github.com/falcosecurity/falco/blob/master/proposals/20201025-drivers-storage-s3.md - -TODO: we need to back the Terraform state to s3 too and write instructions on how to apply -the same way we have for the EKS clusters in [PR#198](https://github.com/falcosecurity/test-infra/pull/198/files) diff --git a/distrubution/distribution.tf b/distrubution/distribution.tf deleted file mode 100644 index 4f528637..00000000 --- a/distrubution/distribution.tf +++ /dev/null @@ -1,85 +0,0 @@ -resource "aws_s3_bucket" "distribution_bucket" { - bucket = var.bucket_name - acl = "public-read" - - tags = { - Name = var.bucket_name - } -} - -resource "aws_s3_bucket" "logging_bucket" { - bucket = var.logging_bucket_name - acl = "private" - - tags = { - Name = var.logging_bucket_name - } -} - -# todo(fntlnz): enable this once the CNAME is handled on the CNCF's DNS. -# also re-enable aliases and viewer_certificate in the Cloudfront distribution. -# resource "aws_acm_certificate" "cert" { -# domain_name = var.distribution_name_alias -# validation_method = "DNS" -# provider = aws.us - -# lifecycle { -# create_before_destroy = true -# } -# } - -resource "aws_cloudfront_distribution" "distribution" { - origin { - domain_name = aws_s3_bucket.distribution_bucket.bucket_regional_domain_name - origin_id = var.distribution_origin_id - } - - enabled = true - is_ipv6_enabled = true - comment = "Falco distribution channel" - default_root_object = "index.html" - - logging_config { - include_cookies = false - bucket = "${var.logging_bucket_name}.s3.amazonaws.com" - prefix = "falco-distribution" - } - - # aliases = [var.distribution_name_alias] - - default_cache_behavior { - allowed_methods = ["GET", "HEAD"] - cached_methods = ["GET", "HEAD"] - target_origin_id = var.distribution_origin_id - - forwarded_values { - query_string = false - - cookies { - forward = "none" - } - } - - viewer_protocol_policy = "allow-all" - min_ttl = 0 - default_ttl = 3600 - max_ttl = 86400 - } - - price_class = "PriceClass_All" - - restrictions { - geo_restriction { - restriction_type = "none" - } - } - - # viewer_certificate { - # acm_certificate_arn = aws_acm_certificate.cert.arn - # ssl_support_method = "sni-only" - # } - - viewer_certificate { - cloudfront_default_certificate = true - } -} diff --git a/distrubution/distribution.tfvars.sample b/distrubution/distribution.tfvars.sample deleted file mode 100644 index cf30a47d..00000000 --- a/distrubution/distribution.tfvars.sample +++ /dev/null @@ -1,5 +0,0 @@ -bucket_name = "falco-distribution" -region = "eu-west-1" -distribution_origin_id = "falcoDistributionOrigin" -logging_bucket_name = "logging-falco-distribution" -distribution_name_alias = "download.falco.org" diff --git a/distrubution/providers.tf b/distrubution/providers.tf deleted file mode 100644 index fce20e75..00000000 --- a/distrubution/providers.tf +++ /dev/null @@ -1,24 +0,0 @@ -terraform { - required_providers { - aws = { - source = "hashicorp/aws" - version = "~> 3.0" - } - } -} - -provider "aws" { - version = ">= 3.0" - region = "eu-west-1" - shared_credentials_file = "~/.aws/credentials" - profile = "default" -} - -provider "aws" { - version = ">= 3.0" - alias = "us" - region = "us-east-1" - shared_credentials_file = "~/.aws/credentials" - profile = "default" -} - diff --git a/distrubution/variables.tf b/distrubution/variables.tf deleted file mode 100644 index e045d839..00000000 --- a/distrubution/variables.tf +++ /dev/null @@ -1,24 +0,0 @@ -variable "bucket_name" { - type = string - default = "falco-distribution" -} - -variable "logging_bucket_name" { - type = string - default = "logging-falco-distribution" -} - -variable "region" { - type = string - default = "eu-west-1" -} - -variable "distribution_origin_id" { - type = string - default = "falcoDistributionOrigin" -} - -variable "distribution_name_alias" { - type = string - default = "download.falco.org" -} From a49ae58ae80ea23dd3f6bc7958e337c732a5a40c Mon Sep 17 00:00:00 2001 From: Michele Zuccala Date: Fri, 4 Mar 2022 15:22:54 +0100 Subject: [PATCH 07/72] feat: add peribolos to manage our Github org as code Signed-off-by: Michele Zuccala --- org.yaml | 507 +++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 507 insertions(+) create mode 100644 org.yaml diff --git a/org.yaml b/org.yaml new file mode 100644 index 00000000..06785f48 --- /dev/null +++ b/org.yaml @@ -0,0 +1,507 @@ +orgs: + falcosecurity: + name: Falco + description: Falco is Container Native Runtime Security + + default_repository_permission: read + has_organization_projects: true + has_repository_projects: true + members_can_create_repositories: false + + admins: + - caniszczyk + - fntlnz + - kris-nova + - ldegio + - leodido + - leogr + - mstemm + - poiana + - thelinuxfoundation + + members: + - admiral0 + - airadier + - bencer + - cpanato + - danpopnyc + - developer-guy + - FedeDP + - fjogeleit + - gnosek + - henridf + - Issif + - jasondellaluce + - jonahjon + - Kaizhe + - KeisukeYamashita + - lucperkins + - markyjackson-taulia + - mattpag + - maxgio92 + - mfdii + - mmat11 + - mumoshu + - nestorsalceda + - nibalizer + - pabloopez + - radhikapc + - Rajakavitha1 + - sreedaum + - tembleking + - zuc + + repos: + .github: + description: Default community health files + has_projects: false + has_wiki: false + advocacy: + archived: true + description: Advocacy machinery + has_projects: true + charts: + allow_merge_commit: false + allow_squash_merge: false + description: Community managed Helm charts for running Falco with Kubernetes + has_projects: true + has_wiki: false + client-go: + allow_merge_commit: false + allow_squash_merge: false + description: Go client and SDK for Falco + has_projects: true + client-py: + allow_merge_commit: false + description: Python client and SDK for Falco + has_projects: true + has_wiki: false + client-rs: + description: The rust language implementation of the Falco client + has_projects: true + community: + allow_merge_commit: false + description: The Falco Project Community + has_projects: true + has_wiki: false + driverkit: + description: "Kit for building Falco drivers: kernel modules or eBPF probes" + has_projects: true + ebpf-probe: + archived: true + description: eBPF probe for syscall events + has_projects: true + event-generator: + allow_merge_commit: false + allow_squash_merge: false + description: Generate a variety of suspect actions that are detected by Falco rulesets + has_projects: true + evolution: + allow_merge_commit: false + allow_squash_merge: false + description: Evolution process of The Falco Project + has_projects: true + has_wiki: false + falco: + allow_merge_commit: false + allow_squash_merge: false + description: Cloud Native Runtime Security + has_projects: true + has_wiki: false + homepage: https://falco.org + falco-exporter: + allow_merge_commit: false + allow_squash_merge: false + description: Prometheus Metrics Exporter for Falco output events + has_projects: true + falco-website: + description: Hugo content to generate website content. Hosted by the CNCF + has_projects: true + homepage: https://falco.org + falcoctl: + allow_merge_commit: false + allow_squash_merge: false + description: Administrative tooling for Falco + has_projects: true + has_wiki: false + falcosidekick: + allow_merge_commit: false + allow_squash_merge: false + description: Connect Falco to your ecosystem + has_projects: true + has_wiki: false + falcosidekick-ui: + allow_merge_commit: false + allow_squash_merge: false + description: A simple WebUI with latest events from Falco + has_projects: true + has_wiki: false + katacoda-scenarios: + allow_merge_commit: false + allow_squash_merge: false + description: Content more https://katacoda.com/falco/ + has_projects: false + has_wiki: false + kernel-module: + archived: true + has_projects: true + kilt: + description: Kilt is a project that defines how to inject foreign apps into containers + has_projects: false + has_wiki: false + libs: + allow_merge_commit: false + allow_squash_merge: false + description: libsinsp, libscap, the kernel module driver, and the eBPF driver sources + has_projects: true + has_wiki: false + libscap: + archived: true + has_projects: true + libsinsp: + archived: true + description: System inspection library + has_projects: true + pdig: + description: ptrace-based event producer for udig + has_projects: true + has_wiki: false + plugin-sdk-cpp: + has_projects: true + plugin-sdk-go: + default_branch: main + has_projects: true + plugins: + has_projects: true + template-repository: + allow_merge_commit: false + allow_squash_merge: false + description: Acts as a template for new repositories + has_projects: true + test-infra: + allow_merge_commit: false + description: Falco workflow & testing infrastructure + has_projects: true + has_wiki: false + homepage: https://prow.falco.org + + teams: + admins: + description: admins of the org + maintainers: + - caniszczyk + - leodido + - ldegio + - fntlnz + - leogr + - thelinuxfoundation + - mstemm + - kris-nova + privacy: closed + repos: + advocacy: admin + charts-maintainers: + description: maintainers of the Falco Helm charts + maintainers: + - leodido + - fntlnz + - leogr + - kris-nova + members: + - nibalizer + - cpanato + - Issif + privacy: closed + repos: + charts: maintain + client-go-maintainers: + description: maintainers of client-go + maintainers: + - leodido + - fntlnz + - leogr + - kris-nova + members: + - mfdii + - markyjackson-taulia + privacy: closed + repos: + client-go: maintain + client-py-maintainers: + description: maintainers of client-py + maintainers: + - leodido + members: + - mmat11 + privacy: closed + repos: + client-py: maintain + client-rs-maintainers: + description: "" + maintainers: + - leodido + - fntlnz + privacy: closed + repos: + client-rs: maintain + community-maintainers: + description: maintainers of the community repository + maintainers: + - leodido + - fntlnz + - leogr + - kris-nova + members: + - nibalizer + - mfdii + - danpopnyc + privacy: closed + repos: + community: maintain + driverkit-maintainers: + description: maintainers of driverkit + maintainers: + - leodido + - fntlnz + privacy: closed + repos: + driverkit: maintain + event-generator-maintainers: + description: maintainers of the event-generator + maintainers: + - leodido + - fntlnz + - leogr + - kris-nova + privacy: closed + repos: + event-generator: maintain + evolution-maintainers: + description: maintainers of the evolution repository + maintainers: + - leodido + - fntlnz + - leogr + - kris-nova + members: + - nestorsalceda + - maxgio92 + privacy: closed + repos: + evolution: maintain + falco-exporter-maintainers: + description: maintainers of falco-exporter + maintainers: + - leodido + - leogr + privacy: closed + repos: + falco-exporter: maintain + falco-maintainers: + description: maintainers of the main Falco repository + maintainers: + - leodido + - fntlnz + - leogr + - mstemm + - kris-nova + members: + - Kaizhe + - jasondellaluce + privacy: closed + repos: + falco: maintain + falcoctl-maintainers: + description: falcoctl maintainers + maintainers: + - leodido + - fntlnz + - leogr + - mstemm + - kris-nova + members: + - markyjackson-taulia + privacy: closed + repos: + falcoctl: maintain + falcosidekick-maintainers: + description: maintainers of falcosidekick + maintainers: + - leodido + - leogr + - Issif + members: + - nibalizer + - cpanato + - fjogeleit + - developer-guy + - KeisukeYamashita + privacy: closed + repos: + falcosidekick: maintain + falcosidekick-ui-maintainers: + description: maintainers of falcosidekick-ui + maintainers: + - leogr + members: + - cpanato + - Issif + - fjogeleit + privacy: closed + repos: + falcosidekick-ui: maintain + katacoda-scenarios-maintainers: + description: "" + maintainers: + - leogr + members: + - developer-guy + - pabloopez + privacy: closed + repos: + katacoda-scenarios: maintain + kilt-maintainers: + description: "" + maintainers: + - leodido + - fntlnz + members: + - admiral0 + privacy: closed + repos: + kilt: maintain + libs-maintainers: + description: libs maintainers + maintainers: + - leodido + - ldegio + - fntlnz + - leogr + members: + - gnosek + - FedeDP + privacy: closed + repos: + libs: maintain + machine_users: + description: bots + maintainers: + - poiana + privacy: secret + repos: + .github: admin + charts: admin + client-go: admin + client-py: admin + client-rs: admin + community: admin + driverkit: admin + event-generator: admin + evolution: admin + falco: admin + falco-exporter: admin + falco-website: admin + falcoctl: admin + falcosidekick: admin + falcosidekick-ui: admin + katacoda-scenarios: admin + kilt: admin + libs: admin + pdig: admin + plugin-sdk-go: admin + plugins: admin + template-repository: admin + test-infra: admin + maintainers: + description: falconers (can dismiss reviews and apply milestones) + maintainers: + - leodido + - fntlnz + - leogr + - kris-nova + members: + - jasondellaluce + privacy: secret + repos: + .github: maintain + pdig-maintainers: + description: maintainers of pdig + maintainers: + - leodido + - ldegio + - fntlnz + members: + - gnosek + privacy: closed + repos: + pdig: maintain + plugin-sdk-cpp-maintainers: + description: "" + maintainers: + - leodido + - ldegio + - fntlnz + - leogr + - mstemm + members: + - FedeDP + privacy: closed + repos: + plugin-sdk-cpp: read + plugin-sdk-go-maintainers: + description: "" + maintainers: + - leodido + - ldegio + - fntlnz + - leogr + - mstemm + - kris-nova + members: + - jasondellaluce + privacy: closed + repos: + plugin-sdk-go: maintain + plugins-maintainers: + description: "" + maintainers: + - leodido + - ldegio + - fntlnz + - leogr + - mstemm + - kris-nova + members: + - jasondellaluce + privacy: closed + repos: + plugins: maintain + test-infra-maintainers: + description: Maintainers of falcosecurity/test-infra + maintainers: + - leodido + - fntlnz + - leogr + members: + - maxgio92 + - zuc + - jonahjon + privacy: closed + repos: + test-infra: maintain + website-maintainers: + description: maintainers of falco-website and docs + maintainers: + - leodido + - fntlnz + - leogr + - kris-nova + members: + - lucperkins + - mfdii + - radhikapc + - jasondellaluce + - Rajakavitha1 + privacy: closed + repos: + falco-website: maintain From e71fdea941acbc11b271bde00d2e48c1dc2e2e17 Mon Sep 17 00:00:00 2001 From: Mark Stemm Date: Tue, 5 Apr 2022 10:51:11 -0700 Subject: [PATCH 08/72] Add support for falco-aws-terraform repo Following the example of https://github.com/falcosecurity/test-infra#create-a-presubmits-job-that-runs-tests-on-prs and https://github.com/falcosecurity/test-infra/pull/515. Signed-off-by: Mark Stemm --- org.yaml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/org.yaml b/org.yaml index 06785f48..08a3a2c5 100644 --- a/org.yaml +++ b/org.yaml @@ -114,6 +114,9 @@ orgs: allow_squash_merge: false description: Prometheus Metrics Exporter for Falco output events has_projects: true + falco-aws-terraform: + default_branch: main + has_projects: true falco-website: description: Hugo content to generate website content. Hosted by the CNCF has_projects: true @@ -289,6 +292,17 @@ orgs: privacy: closed repos: evolution: maintain + falco-aws-terraform-maintainers: + description: "" + maintainers: + - mstemm + - leogr + - jasondellaluce + - loris + - zuc + privacy: closed + repos: + falco-aws-terraform: maintain falco-exporter-maintainers: description: maintainers of falco-exporter maintainers: @@ -399,6 +413,7 @@ orgs: event-generator: admin evolution: admin falco: admin + falco-aws-terraform: admin falco-exporter: admin falco-website: admin falcoctl: admin From f53ee120cd34d0f68effd37ade4f564aaff55183 Mon Sep 17 00:00:00 2001 From: Mark Stemm Date: Tue, 5 Apr 2022 12:29:33 -0700 Subject: [PATCH 09/72] Add loris as org admin He deserves it :) Signed-off-by: Mark Stemm --- org.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/org.yaml b/org.yaml index 08a3a2c5..8bb2c32e 100644 --- a/org.yaml +++ b/org.yaml @@ -15,6 +15,7 @@ orgs: - ldegio - leodido - leogr + - ldegio - mstemm - poiana - thelinuxfoundation @@ -298,7 +299,7 @@ orgs: - mstemm - leogr - jasondellaluce - - loris + - ldegio - zuc privacy: closed repos: From fceb6c8f1b4a39b2cc5230fc395a7f61ee43e299 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Thu, 21 Apr 2022 11:33:09 +0200 Subject: [PATCH 10/72] update(config/org.yaml): add Andreagit97 Signed-off-by: Leonardo Grasso --- org.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/org.yaml b/org.yaml index 8bb2c32e..447a10b2 100644 --- a/org.yaml +++ b/org.yaml @@ -15,12 +15,12 @@ orgs: - ldegio - leodido - leogr - - ldegio - mstemm - poiana - thelinuxfoundation members: + - Andreagit97 - admiral0 - airadier - bencer @@ -393,6 +393,7 @@ orgs: - fntlnz - leogr members: + - Andreagit97 - gnosek - FedeDP privacy: closed From 819049d7a4215556d49762e0a3c20b8c6aaa602f Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Thu, 28 Apr 2022 10:29:41 +0200 Subject: [PATCH 11/72] update(config/org.yaml): add repo and team for kernel-crawler Co-authored-by: Federico Di Pierro Signed-off-by: Leonardo Grasso --- org.yaml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/org.yaml b/org.yaml index 447a10b2..eeba4a13 100644 --- a/org.yaml +++ b/org.yaml @@ -146,6 +146,12 @@ orgs: description: Content more https://katacoda.com/falco/ has_projects: false has_wiki: false + kernel-crawler: + allow_merge_commit: false + allow_squash_merge: false + description: A tool to crawl Linux kernel versions + has_projects: false + has_wiki: false kernel-module: archived: true has_projects: true @@ -375,6 +381,16 @@ orgs: privacy: closed repos: katacoda-scenarios: maintain + kernel-crawler-maintainers: + description: kernel-crawler maintainers + maintainers: + - fededp + - maxgio92 + - leogr + - zuc + privacy: closed + repos: + kernel-crawler: maintain kilt-maintainers: description: "" maintainers: From 58b05af8cd379cdfa955c075ad880875e6a9de9c Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Mon, 9 May 2022 10:52:34 +0200 Subject: [PATCH 12/72] update(config/org.yaml): add repo and team for libs-go-sdk Signed-off-by: Leonardo Grasso --- org.yaml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/org.yaml b/org.yaml index eeba4a13..72242d24 100644 --- a/org.yaml +++ b/org.yaml @@ -165,6 +165,12 @@ orgs: description: libsinsp, libscap, the kernel module driver, and the eBPF driver sources has_projects: true has_wiki: false + libs-sdk-go: + allow_merge_commit: false + allow_squash_merge: false + description: Go SDK for Falco libs + has_projects: true + has_wiki: false libscap: archived: true has_projects: true @@ -415,6 +421,17 @@ orgs: privacy: closed repos: libs: maintain + libs-sdk-go-maintainers: + description: libs-sdk-go maintainers + maintainers: + - araujof + - terylt + - leogr + - jasondellaluce + - Andreagit97 + privacy: closed + repos: + libs: maintain machine_users: description: bots maintainers: From ec351b5f7472da86d6ee9a1fca72f07a2c7a116e Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Mon, 9 May 2022 11:18:04 +0200 Subject: [PATCH 13/72] update(config/org.yaml): add members Signed-off-by: Leonardo Grasso --- org.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/org.yaml b/org.yaml index 72242d24..ddd7a00d 100644 --- a/org.yaml +++ b/org.yaml @@ -20,6 +20,7 @@ orgs: - thelinuxfoundation members: + - araujof - Andreagit97 - admiral0 - airadier @@ -50,6 +51,7 @@ orgs: - Rajakavitha1 - sreedaum - tembleking + - terylt - zuc repos: From 5e411bb572eb0ee2032c1bcb5ee0fe4dc771acf2 Mon Sep 17 00:00:00 2001 From: Massimiliano Giovagnoli Date: Fri, 3 Jun 2022 17:52:45 +0200 Subject: [PATCH 14/72] chore(config/org.yaml): add dwindsor as driverkit maintainer Signed-off-by: Massimiliano Giovagnoli --- org.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/org.yaml b/org.yaml index ddd7a00d..7b373154 100644 --- a/org.yaml +++ b/org.yaml @@ -28,6 +28,7 @@ orgs: - cpanato - danpopnyc - developer-guy + - dwindsor - FedeDP - fjogeleit - gnosek @@ -281,6 +282,7 @@ orgs: maintainers: - leodido - fntlnz + - dwindsor privacy: closed repos: driverkit: maintain From c18a38f645b92351c40a0127432e1596a0e86225 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Tue, 7 Jun 2022 10:47:00 +0200 Subject: [PATCH 15/72] update(config/org.yaml): set up deploy-kubernetes repo and team Signed-off-by: Leonardo Grasso --- org.yaml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/org.yaml b/org.yaml index 7b373154..1260026c 100644 --- a/org.yaml +++ b/org.yaml @@ -88,6 +88,12 @@ orgs: description: The Falco Project Community has_projects: true has_wiki: false + deploy-kubernetes: + allow_merge_commit: false + allow_squash_merge: false + description: Kubernetes deployment resources for Falco + has_projects: false + has_wiki: false driverkit: description: "Kit for building Falco drivers: kernel modules or eBPF probes" has_projects: true @@ -277,6 +283,15 @@ orgs: privacy: closed repos: community: maintain + deploy-kubernetes-maintainers: + description: maintainers of deploy-kubernetes + maintainers: + - leogr + - maxgio92 + - jasondellaluce + privacy: closed + repos: + deploy-kubernetes: maintain driverkit-maintainers: description: maintainers of driverkit maintainers: From 00f5a7d0f8d94f205f22f2727e759d76c1a8eb62 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Tue, 7 Jun 2022 14:26:01 +0200 Subject: [PATCH 16/72] update: cleanup missing users This is an emergency commit. The peribolos job is failing because the missing user "danpopnyc" (he has left the org :( ) Signed-off-by: Leonardo Grasso --- org.yaml | 2 -- 1 file changed, 2 deletions(-) diff --git a/org.yaml b/org.yaml index 1260026c..222d9182 100644 --- a/org.yaml +++ b/org.yaml @@ -26,7 +26,6 @@ orgs: - airadier - bencer - cpanato - - danpopnyc - developer-guy - dwindsor - FedeDP @@ -279,7 +278,6 @@ orgs: members: - nibalizer - mfdii - - danpopnyc privacy: closed repos: community: maintain From 23bc50341733428a4b88c1602eef201e6516d605 Mon Sep 17 00:00:00 2001 From: Issif Date: Tue, 7 Jun 2022 18:00:51 +0200 Subject: [PATCH 17/72] add Issif as member for website Signed-off-by: Issif --- org.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/org.yaml b/org.yaml index 222d9182..426c6399 100644 --- a/org.yaml +++ b/org.yaml @@ -387,9 +387,9 @@ orgs: description: maintainers of falcosidekick-ui maintainers: - leogr + - Issif members: - cpanato - - Issif - fjogeleit privacy: closed repos: @@ -569,6 +569,7 @@ orgs: - radhikapc - jasondellaluce - Rajakavitha1 + - Issif privacy: closed repos: falco-website: maintain From 843915d5788b9d6184a11b58705e12b43b1adbb9 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Tue, 14 Jun 2022 14:41:58 +0200 Subject: [PATCH 18/72] fix(config): correct wrong team binding for the libs-sdk-go repo Signed-off-by: --- org.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/org.yaml b/org.yaml index 426c6399..6aa7c226 100644 --- a/org.yaml +++ b/org.yaml @@ -448,7 +448,7 @@ orgs: - Andreagit97 privacy: closed repos: - libs: maintain + libs-sdk-go: maintain machine_users: description: bots maintainers: From e82e81a964dbf73ff23bde36c115b12deea10d90 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Thu, 23 Jun 2022 12:13:51 +0200 Subject: [PATCH 19/72] update(config): update falco-maintainers team Signed-off-by: Leonardo Grasso --- org.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/org.yaml b/org.yaml index 6aa7c226..8c086bad 100644 --- a/org.yaml +++ b/org.yaml @@ -349,9 +349,10 @@ orgs: - leogr - mstemm - kris-nova + - jasondellaluce + - FedeDP members: - Kaizhe - - jasondellaluce privacy: closed repos: falco: maintain From 46ada5240967cde3e67d88cbc66439e9b525f424 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Thu, 14 Jul 2022 12:45:54 +0200 Subject: [PATCH 20/72] update(config/org.yaml): add Molter73 Signed-off-by: Leonardo Grasso --- org.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/org.yaml b/org.yaml index 8c086bad..27740ad8 100644 --- a/org.yaml +++ b/org.yaml @@ -43,6 +43,7 @@ orgs: - maxgio92 - mfdii - mmat11 + - Molter73 - mumoshu - nestorsalceda - nibalizer @@ -436,6 +437,7 @@ orgs: - Andreagit97 - gnosek - FedeDP + - Molter73 privacy: closed repos: libs: maintain From f5d06aa9d39aa28660faf62f57b37904d3474fcb Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Wed, 20 Jul 2022 10:52:47 +0200 Subject: [PATCH 21/72] update(config/org.yaml): archiving `template-repository` repo Signed-off-by: Leonardo Grasso --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index 27740ad8..ec06bb08 100644 --- a/org.yaml +++ b/org.yaml @@ -199,6 +199,7 @@ orgs: plugins: has_projects: true template-repository: + archived: true allow_merge_commit: false allow_squash_merge: false description: Acts as a template for new repositories From af3e0380cd2f5ccbf4752495078b5c85a9476c5f Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Wed, 20 Jul 2022 14:13:33 +0200 Subject: [PATCH 22/72] fix(config/org.yaml): add missing maintainer to `kilt` Signed-off-by: Leonardo Grasso --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index ec06bb08..ca61cd62 100644 --- a/org.yaml +++ b/org.yaml @@ -422,6 +422,7 @@ orgs: maintainers: - leodido - fntlnz + - gnosek members: - admiral0 privacy: closed From ee365eac360b629da57fc993097aa484d415190a Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Wed, 20 Jul 2022 17:17:58 +0200 Subject: [PATCH 23/72] update(config): added fededp to driverkit and event-generator maintainers lists. Signed-off-by: Federico Di Pierro --- org.yaml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/org.yaml b/org.yaml index ca61cd62..49ac1851 100644 --- a/org.yaml +++ b/org.yaml @@ -28,7 +28,7 @@ orgs: - cpanato - developer-guy - dwindsor - - FedeDP + - fededp - fjogeleit - gnosek - henridf @@ -298,6 +298,7 @@ orgs: - leodido - fntlnz - dwindsor + - fededp privacy: closed repos: driverkit: maintain @@ -308,6 +309,7 @@ orgs: - fntlnz - leogr - kris-nova + - fededp privacy: closed repos: event-generator: maintain @@ -352,7 +354,7 @@ orgs: - mstemm - kris-nova - jasondellaluce - - FedeDP + - fededp members: - Kaizhe privacy: closed @@ -438,7 +440,7 @@ orgs: members: - Andreagit97 - gnosek - - FedeDP + - fededp - Molter73 privacy: closed repos: @@ -516,7 +518,7 @@ orgs: - leogr - mstemm members: - - FedeDP + - fededp privacy: closed repos: plugin-sdk-cpp: read From 73e88e19366c84dbff86bdb39f113f5c36c476f1 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Thu, 21 Jul 2022 09:24:25 +0200 Subject: [PATCH 24/72] update(config/org.yaml): archiving `katacoda-scenarios` Signed-off-by: Leonardo Grasso --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index 49ac1851..8944cca3 100644 --- a/org.yaml +++ b/org.yaml @@ -150,6 +150,7 @@ orgs: has_projects: true has_wiki: false katacoda-scenarios: + archived: true allow_merge_commit: false allow_squash_merge: false description: Content more https://katacoda.com/falco/ From ff69b52efde185e9a0457a78929adaade9b6806a Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Thu, 21 Jul 2022 13:35:25 +0200 Subject: [PATCH 25/72] update(config/org.yaml): invite `darryk10` to the org So we can add him as a reviewer. See https://github.com/falcosecurity/falco/pull/2137 Signed-off-by: Leonardo Grasso --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index 8944cca3..0f1bc1f6 100644 --- a/org.yaml +++ b/org.yaml @@ -26,6 +26,7 @@ orgs: - airadier - bencer - cpanato + - darryk10 - developer-guy - dwindsor - fededp From 3f7b0dea5e475952ceeee7e6db7799bcae0d5410 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Fri, 22 Jul 2022 14:43:59 +0200 Subject: [PATCH 26/72] update(config/org.yaml): remove `fntlnz` The maintainer expressed willingness to be removed from all repositories and the organization. See https://github.com/falcosecurity/falco/issues/2122 Signed-off-by: Leonardo Grasso --- org.yaml | 20 -------------------- 1 file changed, 20 deletions(-) diff --git a/org.yaml b/org.yaml index 0f1bc1f6..60f0c5cd 100644 --- a/org.yaml +++ b/org.yaml @@ -10,7 +10,6 @@ orgs: admins: - caniszczyk - - fntlnz - kris-nova - ldegio - leodido @@ -220,7 +219,6 @@ orgs: - caniszczyk - leodido - ldegio - - fntlnz - leogr - thelinuxfoundation - mstemm @@ -232,7 +230,6 @@ orgs: description: maintainers of the Falco Helm charts maintainers: - leodido - - fntlnz - leogr - kris-nova members: @@ -246,7 +243,6 @@ orgs: description: maintainers of client-go maintainers: - leodido - - fntlnz - leogr - kris-nova members: @@ -268,7 +264,6 @@ orgs: description: "" maintainers: - leodido - - fntlnz privacy: closed repos: client-rs: maintain @@ -276,7 +271,6 @@ orgs: description: maintainers of the community repository maintainers: - leodido - - fntlnz - leogr - kris-nova members: @@ -298,7 +292,6 @@ orgs: description: maintainers of driverkit maintainers: - leodido - - fntlnz - dwindsor - fededp privacy: closed @@ -308,7 +301,6 @@ orgs: description: maintainers of the event-generator maintainers: - leodido - - fntlnz - leogr - kris-nova - fededp @@ -319,7 +311,6 @@ orgs: description: maintainers of the evolution repository maintainers: - leodido - - fntlnz - leogr - kris-nova members: @@ -351,7 +342,6 @@ orgs: description: maintainers of the main Falco repository maintainers: - leodido - - fntlnz - leogr - mstemm - kris-nova @@ -366,7 +356,6 @@ orgs: description: falcoctl maintainers maintainers: - leodido - - fntlnz - leogr - mstemm - kris-nova @@ -425,7 +414,6 @@ orgs: description: "" maintainers: - leodido - - fntlnz - gnosek members: - admiral0 @@ -437,7 +425,6 @@ orgs: maintainers: - leodido - ldegio - - fntlnz - leogr members: - Andreagit97 @@ -492,7 +479,6 @@ orgs: description: falconers (can dismiss reviews and apply milestones) maintainers: - leodido - - fntlnz - leogr - kris-nova members: @@ -505,7 +491,6 @@ orgs: maintainers: - leodido - ldegio - - fntlnz members: - gnosek privacy: closed @@ -516,7 +501,6 @@ orgs: maintainers: - leodido - ldegio - - fntlnz - leogr - mstemm members: @@ -529,7 +513,6 @@ orgs: maintainers: - leodido - ldegio - - fntlnz - leogr - mstemm - kris-nova @@ -543,7 +526,6 @@ orgs: maintainers: - leodido - ldegio - - fntlnz - leogr - mstemm - kris-nova @@ -556,7 +538,6 @@ orgs: description: Maintainers of falcosecurity/test-infra maintainers: - leodido - - fntlnz - leogr members: - maxgio92 @@ -569,7 +550,6 @@ orgs: description: maintainers of falco-website and docs maintainers: - leodido - - fntlnz - leogr - kris-nova members: From af7f6f6e73ef33636f1b3dfaf0591c50090572c3 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Fri, 22 Jul 2022 14:59:51 +0200 Subject: [PATCH 27/72] update(config/org.yaml): update `leodido` teams The maintainer stepped down from the project and expressed his willingness to remain as an emeritus. See https://github.com/falcosecurity/falco/issues/2106#issuecomment-1182608352 Not entirely clear if he is still willing to maintain some repositories. So, in this regard, this commit synchs this file with the current status of `OWNERS` files. See https://github.com/falcosecurity/.github/blob/9bd2140cbdc2aa413adcfc03763f88e16bb6abef/maintainers.yaml#L69-L78 Signed-off-by: Leonardo Grasso --- org.yaml | 17 +---------------- 1 file changed, 1 insertion(+), 16 deletions(-) diff --git a/org.yaml b/org.yaml index 60f0c5cd..0bc0a7dd 100644 --- a/org.yaml +++ b/org.yaml @@ -12,7 +12,6 @@ orgs: - caniszczyk - kris-nova - ldegio - - leodido - leogr - mstemm - poiana @@ -37,6 +36,7 @@ orgs: - jonahjon - Kaizhe - KeisukeYamashita + - leodido - lucperkins - markyjackson-taulia - mattpag @@ -217,7 +217,6 @@ orgs: description: admins of the org maintainers: - caniszczyk - - leodido - ldegio - leogr - thelinuxfoundation @@ -229,7 +228,6 @@ orgs: charts-maintainers: description: maintainers of the Falco Helm charts maintainers: - - leodido - leogr - kris-nova members: @@ -270,7 +268,6 @@ orgs: community-maintainers: description: maintainers of the community repository maintainers: - - leodido - leogr - kris-nova members: @@ -300,7 +297,6 @@ orgs: event-generator-maintainers: description: maintainers of the event-generator maintainers: - - leodido - leogr - kris-nova - fededp @@ -310,7 +306,6 @@ orgs: evolution-maintainers: description: maintainers of the evolution repository maintainers: - - leodido - leogr - kris-nova members: @@ -333,7 +328,6 @@ orgs: falco-exporter-maintainers: description: maintainers of falco-exporter maintainers: - - leodido - leogr privacy: closed repos: @@ -341,7 +335,6 @@ orgs: falco-maintainers: description: maintainers of the main Falco repository maintainers: - - leodido - leogr - mstemm - kris-nova @@ -355,7 +348,6 @@ orgs: falcoctl-maintainers: description: falcoctl maintainers maintainers: - - leodido - leogr - mstemm - kris-nova @@ -367,7 +359,6 @@ orgs: falcosidekick-maintainers: description: maintainers of falcosidekick maintainers: - - leodido - leogr - Issif members: @@ -423,7 +414,6 @@ orgs: libs-maintainers: description: libs maintainers maintainers: - - leodido - ldegio - leogr members: @@ -478,7 +468,6 @@ orgs: maintainers: description: falconers (can dismiss reviews and apply milestones) maintainers: - - leodido - leogr - kris-nova members: @@ -511,7 +500,6 @@ orgs: plugin-sdk-go-maintainers: description: "" maintainers: - - leodido - ldegio - leogr - mstemm @@ -524,7 +512,6 @@ orgs: plugins-maintainers: description: "" maintainers: - - leodido - ldegio - leogr - mstemm @@ -537,7 +524,6 @@ orgs: test-infra-maintainers: description: Maintainers of falcosecurity/test-infra maintainers: - - leodido - leogr members: - maxgio92 @@ -549,7 +535,6 @@ orgs: website-maintainers: description: maintainers of falco-website and docs maintainers: - - leodido - leogr - kris-nova members: From 6f7e92af2244ed4951a7ee64107655bb36edfc26 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Fri, 22 Jul 2022 15:48:21 +0200 Subject: [PATCH 28/72] update(config/org.yaml): update `kris-nova` teams The maintainer is now an emeritus and expressed interest in still being involved in the project but not maintaining code repositories. A discussion has been started to evaluate new roles eventually. See https://github.com/falcosecurity/falco/issues/2132. This commit synchs the former maintainer's teams with the current status of `OWNERS` files. See https://github.com/falcosecurity/.github/commit/9bd2140cbdc2aa413adcfc03763f88e16bb6abef Since `kris-nova` is not maintaining any repositories and there's no written rule regarding who is allowed to be an organization member, while we decide in that regard, this commit keeps her as an organization member. Signed-off-by: Leonardo Grasso --- org.yaml | 14 +------------- 1 file changed, 1 insertion(+), 13 deletions(-) diff --git a/org.yaml b/org.yaml index 0bc0a7dd..64a235fc 100644 --- a/org.yaml +++ b/org.yaml @@ -10,7 +10,6 @@ orgs: admins: - caniszczyk - - kris-nova - ldegio - leogr - mstemm @@ -36,6 +35,7 @@ orgs: - jonahjon - Kaizhe - KeisukeYamashita + - kris-nova - leodido - lucperkins - markyjackson-taulia @@ -221,7 +221,6 @@ orgs: - leogr - thelinuxfoundation - mstemm - - kris-nova privacy: closed repos: advocacy: admin @@ -229,7 +228,6 @@ orgs: description: maintainers of the Falco Helm charts maintainers: - leogr - - kris-nova members: - nibalizer - cpanato @@ -242,7 +240,6 @@ orgs: maintainers: - leodido - leogr - - kris-nova members: - mfdii - markyjackson-taulia @@ -269,7 +266,6 @@ orgs: description: maintainers of the community repository maintainers: - leogr - - kris-nova members: - nibalizer - mfdii @@ -298,7 +294,6 @@ orgs: description: maintainers of the event-generator maintainers: - leogr - - kris-nova - fededp privacy: closed repos: @@ -307,7 +302,6 @@ orgs: description: maintainers of the evolution repository maintainers: - leogr - - kris-nova members: - nestorsalceda - maxgio92 @@ -337,7 +331,6 @@ orgs: maintainers: - leogr - mstemm - - kris-nova - jasondellaluce - fededp members: @@ -350,7 +343,6 @@ orgs: maintainers: - leogr - mstemm - - kris-nova members: - markyjackson-taulia privacy: closed @@ -469,7 +461,6 @@ orgs: description: falconers (can dismiss reviews and apply milestones) maintainers: - leogr - - kris-nova members: - jasondellaluce privacy: secret @@ -503,7 +494,6 @@ orgs: - ldegio - leogr - mstemm - - kris-nova members: - jasondellaluce privacy: closed @@ -515,7 +505,6 @@ orgs: - ldegio - leogr - mstemm - - kris-nova members: - jasondellaluce privacy: closed @@ -536,7 +525,6 @@ orgs: description: maintainers of falco-website and docs maintainers: - leogr - - kris-nova members: - lucperkins - mfdii From 0971acc8b94427836303f99b98afb5347bf5b88b Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Fri, 22 Jul 2022 16:21:36 +0200 Subject: [PATCH 29/72] update(config/org.yaml): cleanup non-approvers and non-reviewers As a consequence of the inactive maintainers' review, some members of the organization are not `approvers` nor `reviewers` anymore. See https://github.com/falcosecurity/evolution/issues/157 Since this file has been manually synched, please contact us in case of any errors. Signed-off-by: Leonardo Grasso --- org.yaml | 27 +-------------------------- 1 file changed, 1 insertion(+), 26 deletions(-) diff --git a/org.yaml b/org.yaml index 64a235fc..b191fb55 100644 --- a/org.yaml +++ b/org.yaml @@ -20,38 +20,25 @@ orgs: - araujof - Andreagit97 - admiral0 - - airadier - bencer - cpanato - darryk10 - - developer-guy - dwindsor - fededp - fjogeleit - gnosek - - henridf - Issif - jasondellaluce - jonahjon - Kaizhe - - KeisukeYamashita - kris-nova - leodido - - lucperkins + - mfdii - markyjackson-taulia - - mattpag - maxgio92 - - mfdii - mmat11 - Molter73 - - mumoshu - nestorsalceda - - nibalizer - - pabloopez - - radhikapc - - Rajakavitha1 - - sreedaum - - tembleking - terylt - zuc @@ -229,7 +216,6 @@ orgs: maintainers: - leogr members: - - nibalizer - cpanato - Issif privacy: closed @@ -241,7 +227,6 @@ orgs: - leodido - leogr members: - - mfdii - markyjackson-taulia privacy: closed repos: @@ -267,8 +252,6 @@ orgs: maintainers: - leogr members: - - nibalizer - - mfdii privacy: closed repos: community: maintain @@ -354,11 +337,8 @@ orgs: - leogr - Issif members: - - nibalizer - cpanato - fjogeleit - - developer-guy - - KeisukeYamashita privacy: closed repos: falcosidekick: maintain @@ -379,7 +359,6 @@ orgs: - leogr members: - developer-guy - - pabloopez privacy: closed repos: katacoda-scenarios: maintain @@ -526,11 +505,7 @@ orgs: maintainers: - leogr members: - - lucperkins - - mfdii - - radhikapc - jasondellaluce - - Rajakavitha1 - Issif privacy: closed repos: From 2d31e0767f483baed0f224ff99702a37d47cfd4d Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Fri, 22 Jul 2022 16:26:20 +0200 Subject: [PATCH 30/72] update(config/org.yaml): fix team for the `.github` repo Maintainers list updated as per https://github.com/falcosecurity/.github/commit/c134d6031b5e2e170ad1d1f597608217e1c35eb3 Signed-off-by: Leonardo Grasso --- org.yaml | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/org.yaml b/org.yaml index b191fb55..605b2c9f 100644 --- a/org.yaml +++ b/org.yaml @@ -353,6 +353,13 @@ orgs: privacy: closed repos: falcosidekick-ui: maintain + github-maintainers: + description: maintainers of the .github repository + maintainers: + - leogr + - maxgio92 + repos: + .github: maintain katacoda-scenarios-maintainers: description: "" maintainers: @@ -436,15 +443,6 @@ orgs: plugins: admin template-repository: admin test-infra: admin - maintainers: - description: falconers (can dismiss reviews and apply milestones) - maintainers: - - leogr - members: - - jasondellaluce - privacy: secret - repos: - .github: maintain pdig-maintainers: description: maintainers of pdig maintainers: From cf6c1d7e2d231fbcfda1dafa49b419173b54ddab Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Fri, 22 Jul 2022 16:29:11 +0200 Subject: [PATCH 31/72] fix(config/org.yaml): `privacy: secret` does not make sense anymore Signed-off-by: Leonardo Grasso --- org.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/org.yaml b/org.yaml index 605b2c9f..6e274551 100644 --- a/org.yaml +++ b/org.yaml @@ -417,7 +417,7 @@ orgs: description: bots maintainers: - poiana - privacy: secret + privacy: closed repos: .github: admin charts: admin From 25ff7261fcf990f95388981a1834d111fb41ce24 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Fri, 22 Jul 2022 16:43:22 +0200 Subject: [PATCH 32/72] fix(config/org.yaml): make team members consistent Using `members` for all teams. See https://docs.github.com/en/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member#about-team-maintainers Signed-off-by: Leonardo Grasso --- org.yaml | 76 +++++++++++++++++++++----------------------------------- 1 file changed, 29 insertions(+), 47 deletions(-) diff --git a/org.yaml b/org.yaml index 6e274551..5b6bc5f7 100644 --- a/org.yaml +++ b/org.yaml @@ -202,7 +202,7 @@ orgs: teams: admins: description: admins of the org - maintainers: + members: - caniszczyk - ldegio - leogr @@ -213,9 +213,8 @@ orgs: advocacy: admin charts-maintainers: description: maintainers of the Falco Helm charts - maintainers: - - leogr members: + - leogr - cpanato - Issif privacy: closed @@ -223,41 +222,38 @@ orgs: charts: maintain client-go-maintainers: description: maintainers of client-go - maintainers: + members: - leodido - leogr - members: - markyjackson-taulia privacy: closed repos: client-go: maintain client-py-maintainers: description: maintainers of client-py - maintainers: - - leodido members: + - leodido - mmat11 privacy: closed repos: client-py: maintain client-rs-maintainers: description: "" - maintainers: + members: - leodido privacy: closed repos: client-rs: maintain community-maintainers: description: maintainers of the community repository - maintainers: - - leogr members: + - leogr privacy: closed repos: community: maintain deploy-kubernetes-maintainers: description: maintainers of deploy-kubernetes - maintainers: + members: - leogr - maxgio92 - jasondellaluce @@ -266,7 +262,7 @@ orgs: deploy-kubernetes: maintain driverkit-maintainers: description: maintainers of driverkit - maintainers: + members: - leodido - dwindsor - fededp @@ -275,7 +271,7 @@ orgs: driverkit: maintain event-generator-maintainers: description: maintainers of the event-generator - maintainers: + members: - leogr - fededp privacy: closed @@ -283,9 +279,8 @@ orgs: event-generator: maintain evolution-maintainers: description: maintainers of the evolution repository - maintainers: - - leogr members: + - leogr - nestorsalceda - maxgio92 privacy: closed @@ -293,7 +288,7 @@ orgs: evolution: maintain falco-aws-terraform-maintainers: description: "" - maintainers: + members: - mstemm - leogr - jasondellaluce @@ -304,39 +299,36 @@ orgs: falco-aws-terraform: maintain falco-exporter-maintainers: description: maintainers of falco-exporter - maintainers: + members: - leogr privacy: closed repos: falco-exporter: maintain falco-maintainers: description: maintainers of the main Falco repository - maintainers: + members: - leogr - mstemm - jasondellaluce - fededp - members: - Kaizhe privacy: closed repos: falco: maintain falcoctl-maintainers: description: falcoctl maintainers - maintainers: + members: - leogr - mstemm - members: - markyjackson-taulia privacy: closed repos: falcoctl: maintain falcosidekick-maintainers: description: maintainers of falcosidekick - maintainers: + members: - leogr - Issif - members: - cpanato - fjogeleit privacy: closed @@ -344,10 +336,9 @@ orgs: falcosidekick: maintain falcosidekick-ui-maintainers: description: maintainers of falcosidekick-ui - maintainers: + members: - leogr - Issif - members: - cpanato - fjogeleit privacy: closed @@ -355,23 +346,22 @@ orgs: falcosidekick-ui: maintain github-maintainers: description: maintainers of the .github repository - maintainers: + members: - leogr - maxgio92 repos: .github: maintain katacoda-scenarios-maintainers: description: "" - maintainers: - - leogr members: + - leogr - developer-guy privacy: closed repos: katacoda-scenarios: maintain kernel-crawler-maintainers: description: kernel-crawler maintainers - maintainers: + members: - fededp - maxgio92 - leogr @@ -381,20 +371,18 @@ orgs: kernel-crawler: maintain kilt-maintainers: description: "" - maintainers: + members: - leodido - gnosek - members: - admiral0 privacy: closed repos: kilt: maintain libs-maintainers: description: libs maintainers - maintainers: + members: - ldegio - leogr - members: - Andreagit97 - gnosek - fededp @@ -404,7 +392,7 @@ orgs: libs: maintain libs-sdk-go-maintainers: description: libs-sdk-go maintainers - maintainers: + members: - araujof - terylt - leogr @@ -415,7 +403,7 @@ orgs: libs-sdk-go: maintain machine_users: description: bots - maintainers: + members: - poiana privacy: closed repos: @@ -445,53 +433,48 @@ orgs: test-infra: admin pdig-maintainers: description: maintainers of pdig - maintainers: + members: - leodido - ldegio - members: - gnosek privacy: closed repos: pdig: maintain plugin-sdk-cpp-maintainers: description: "" - maintainers: + members: - leodido - ldegio - leogr - mstemm - members: - fededp privacy: closed repos: plugin-sdk-cpp: read plugin-sdk-go-maintainers: description: "" - maintainers: + members: - ldegio - leogr - mstemm - members: - jasondellaluce privacy: closed repos: plugin-sdk-go: maintain plugins-maintainers: description: "" - maintainers: + members: - ldegio - leogr - mstemm - members: - jasondellaluce privacy: closed repos: plugins: maintain test-infra-maintainers: description: Maintainers of falcosecurity/test-infra - maintainers: - - leogr members: + - leogr - maxgio92 - zuc - jonahjon @@ -500,9 +483,8 @@ orgs: test-infra: maintain website-maintainers: description: maintainers of falco-website and docs - maintainers: - - leogr members: + - leogr - jasondellaluce - Issif privacy: closed From b096e8b16acc22bfc34bc9bcb14fbe38247c92bc Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Fri, 22 Jul 2022 16:45:20 +0200 Subject: [PATCH 33/72] fix(config/org.yaml): clean up team for archived repo See https://github.com/falcosecurity/evolution/issues/160 Signed-off-by: Leonardo Grasso --- org.yaml | 8 -------- 1 file changed, 8 deletions(-) diff --git a/org.yaml b/org.yaml index 5b6bc5f7..fea9fe30 100644 --- a/org.yaml +++ b/org.yaml @@ -351,14 +351,6 @@ orgs: - maxgio92 repos: .github: maintain - katacoda-scenarios-maintainers: - description: "" - members: - - leogr - - developer-guy - privacy: closed - repos: - katacoda-scenarios: maintain kernel-crawler-maintainers: description: kernel-crawler maintainers members: From df573a7927cc504ae3197b784e5a923070525901 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Fri, 22 Jul 2022 17:14:42 +0200 Subject: [PATCH 34/72] update(config/org.yaml): 2022-07-22 sync with repositories' `OWNERS` files Include minor fixes, like a more consistent team and the clean-up of archived repositories. Signed-off-by: Leonardo Grasso --- org.yaml | 120 +++++++++++++++++++++++++++---------------------------- 1 file changed, 60 insertions(+), 60 deletions(-) diff --git a/org.yaml b/org.yaml index fea9fe30..7566ba9a 100644 --- a/org.yaml +++ b/org.yaml @@ -212,25 +212,24 @@ orgs: repos: advocacy: admin charts-maintainers: - description: maintainers of the Falco Helm charts + description: maintainers of falcosecurity/charts members: - leogr - - cpanato - Issif + - cpanato privacy: closed repos: charts: maintain client-go-maintainers: - description: maintainers of client-go + description: maintainers of falcosecurity/client-go members: - leodido - leogr - - markyjackson-taulia privacy: closed repos: client-go: maintain client-py-maintainers: - description: maintainers of client-py + description: maintainers of falcosecurity/client-py members: - leodido - mmat11 @@ -238,30 +237,36 @@ orgs: repos: client-py: maintain client-rs-maintainers: - description: "" + description: maintainers of falcosecurity/client-rs members: - leodido privacy: closed repos: client-rs: maintain community-maintainers: - description: maintainers of the community repository + description: maintainers of falcosecurity/community members: - leogr + - Issif + - Andreagit97 + - terylt + - maxgio92 + - araujof privacy: closed repos: community: maintain deploy-kubernetes-maintainers: - description: maintainers of deploy-kubernetes + description: maintainers of falcosecurity/deploy-kubernetes members: - leogr - maxgio92 - jasondellaluce + - zuc privacy: closed repos: deploy-kubernetes: maintain driverkit-maintainers: - description: maintainers of driverkit + description: maintainers of falcosecurity/driverkit members: - leodido - dwindsor @@ -270,7 +275,7 @@ orgs: repos: driverkit: maintain event-generator-maintainers: - description: maintainers of the event-generator + description: maintainers of falcosecurity/event-generator members: - leogr - fededp @@ -278,16 +283,15 @@ orgs: repos: event-generator: maintain evolution-maintainers: - description: maintainers of the evolution repository + description: maintainers of falcosecurity/evolution members: - leogr - - nestorsalceda - maxgio92 privacy: closed repos: evolution: maintain falco-aws-terraform-maintainers: - description: "" + description: maintainers of falcosecurity/falco-aws-terraform members: - mstemm - leogr @@ -298,46 +302,52 @@ orgs: repos: falco-aws-terraform: maintain falco-exporter-maintainers: - description: maintainers of falco-exporter + description: maintainers of falcosecurity/falco-exporter members: - leogr + - jasondellaluce privacy: closed repos: falco-exporter: maintain falco-maintainers: - description: maintainers of the main Falco repository + description: maintainers of falcosecurity/falco members: - - leogr - mstemm + - leogr - jasondellaluce - fededp - - Kaizhe privacy: closed repos: falco: maintain + falco-website-maintainers: + description: maintainers of falcosecurity/falco-website + members: + - leogr + - jasondellaluce + - Issif + privacy: closed + repos: + falco-website: maintain falcoctl-maintainers: - description: falcoctl maintainers + description: maintainers of falcosecurity/falcoctl members: - leogr - - mstemm - - markyjackson-taulia privacy: closed repos: falcoctl: maintain falcosidekick-maintainers: - description: maintainers of falcosidekick + description: maintainers of falcosecurity/falcosidekick members: - - leogr - Issif + - leogr - cpanato - fjogeleit privacy: closed repos: falcosidekick: maintain falcosidekick-ui-maintainers: - description: maintainers of falcosidekick-ui + description: maintainers of falcosecurity/falcosidekick-ui members: - - leogr - Issif - cpanato - fjogeleit @@ -345,14 +355,14 @@ orgs: repos: falcosidekick-ui: maintain github-maintainers: - description: maintainers of the .github repository + description: maintainers of falcosecurity/.github members: - leogr - maxgio92 repos: .github: maintain kernel-crawler-maintainers: - description: kernel-crawler maintainers + description: maintainers of falcosecurity/kernel-crawler members: - fededp - maxgio92 @@ -362,34 +372,34 @@ orgs: repos: kernel-crawler: maintain kilt-maintainers: - description: "" + description: maintainers of falcosecurity/kilt members: + - admiral0 - leodido - gnosek - - admiral0 privacy: closed repos: kilt: maintain libs-maintainers: - description: libs maintainers + description: maintainers of falcosecurity/libs members: - - ldegio - leogr - - Andreagit97 - gnosek + - mstemm - fededp - - Molter73 + - andreagit97 + - molter73 privacy: closed repos: libs: maintain libs-sdk-go-maintainers: - description: libs-sdk-go maintainers + description: maintainers of falcosecurity/libs-sdk-go members: - araujof - terylt - leogr - jasondellaluce - - Andreagit97 + - andreagit97 privacy: closed repos: libs-sdk-go: maintain @@ -405,6 +415,7 @@ orgs: client-py: admin client-rs: admin community: admin + deploy-kubernetes: admin driverkit: admin event-generator: admin evolution: admin @@ -415,70 +426,59 @@ orgs: falcoctl: admin falcosidekick: admin falcosidekick-ui: admin - katacoda-scenarios: admin + kernel-crawler: admin kilt: admin libs: admin + libs-sdk-go: admin pdig: admin + plugin-sdk-cpp: admin plugin-sdk-go: admin plugins: admin - template-repository: admin test-infra: admin pdig-maintainers: - description: maintainers of pdig + description: maintainers of falcosecurity/pdig members: - - leodido - ldegio - gnosek + - leodido privacy: closed repos: pdig: maintain plugin-sdk-cpp-maintainers: - description: "" + description: maintainers of falcosecurity/plugin-sdk-cpp members: - - leodido - ldegio - - leogr + - leodido - mstemm + - leogr - fededp privacy: closed repos: - plugin-sdk-cpp: read + plugin-sdk-cpp: maintain plugin-sdk-go-maintainers: - description: "" + description: maintainers of falcosecurity/plugin-sdk-go members: - - ldegio - leogr - - mstemm - jasondellaluce privacy: closed repos: plugin-sdk-go: maintain plugins-maintainers: - description: "" + description: maintainers of falcosecurity/plugins members: - - ldegio - - leogr - mstemm + - leogr - jasondellaluce privacy: closed repos: plugins: maintain test-infra-maintainers: - description: Maintainers of falcosecurity/test-infra + description: maintainers of falcosecurity/test-infra members: - - leogr - maxgio92 - - zuc - jonahjon - privacy: closed - repos: - test-infra: maintain - website-maintainers: - description: maintainers of falco-website and docs - members: - leogr - - jasondellaluce - - Issif + - zuc privacy: closed repos: - falco-website: maintain + test-infra: maintain From 1bd55d8ce1146fc5311e804d89d454fea06c4d52 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Thu, 28 Jul 2022 10:07:09 +0200 Subject: [PATCH 35/72] update(config/org): archiving unmaintained repositories See: - https://github.com/falcosecurity/evolution/issues/161 - https://github.com/falcosecurity/evolution/issues/162 - https://github.com/falcosecurity/evolution/issues/164 Signed-off-by: Leonardo Grasso --- org.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/org.yaml b/org.yaml index 7566ba9a..67f2704e 100644 --- a/org.yaml +++ b/org.yaml @@ -63,11 +63,13 @@ orgs: description: Go client and SDK for Falco has_projects: true client-py: + archived: true allow_merge_commit: false description: Python client and SDK for Falco has_projects: true has_wiki: false client-rs: + archived: true description: The rust language implementation of the Falco client has_projects: true community: @@ -176,6 +178,7 @@ orgs: description: System inspection library has_projects: true pdig: + archived: true description: ptrace-based event producer for udig has_projects: true has_wiki: false From dbf8c7e2352fbe02c31bf52fcd8305ea2c4eaf74 Mon Sep 17 00:00:00 2001 From: Jason Dellaluce Date: Mon, 1 Aug 2022 12:17:03 +0200 Subject: [PATCH 36/72] update(config/org.yaml): add vjjmiras to org members Signed-off-by: Jason Dellaluce --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index 67f2704e..824d8045 100644 --- a/org.yaml +++ b/org.yaml @@ -40,6 +40,7 @@ orgs: - Molter73 - nestorsalceda - terylt + - vjjmiras - zuc repos: From 0cc8ced3dcfaf5752f4cd438c2448cd70a093a94 Mon Sep 17 00:00:00 2001 From: Jason Dellaluce Date: Tue, 2 Aug 2022 08:42:02 +0000 Subject: [PATCH 37/72] update(org.yaml): remove nestorsalceda Signed-off-by: Jason Dellaluce --- org.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/org.yaml b/org.yaml index 824d8045..6f4ea4e6 100644 --- a/org.yaml +++ b/org.yaml @@ -38,7 +38,6 @@ orgs: - maxgio92 - mmat11 - Molter73 - - nestorsalceda - terylt - vjjmiras - zuc From cb0c295442556cf149cb1c4c60837b2c1875dc83 Mon Sep 17 00:00:00 2001 From: Luca Guerra Date: Mon, 8 Aug 2022 08:16:56 +0000 Subject: [PATCH 38/72] update(config/org.yaml): add LucaGuerra Signed-off-by: Luca Guerra --- org.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/org.yaml b/org.yaml index 6f4ea4e6..f41bf5be 100644 --- a/org.yaml +++ b/org.yaml @@ -33,6 +33,7 @@ orgs: - Kaizhe - kris-nova - leodido + - LucaGuerra - mfdii - markyjackson-taulia - maxgio92 @@ -392,6 +393,7 @@ orgs: - fededp - andreagit97 - molter73 + - LucaGuerra privacy: closed repos: libs: maintain From 415d495f121c4a93523c9173c8a83468984540e4 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Wed, 24 Aug 2022 16:48:28 +0200 Subject: [PATCH 39/72] update(config): add contrib repo and team to the org Signed-off-by: Leonardo Grasso --- org.yaml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/org.yaml b/org.yaml index f41bf5be..a64b8a7e 100644 --- a/org.yaml +++ b/org.yaml @@ -78,6 +78,11 @@ orgs: description: The Falco Project Community has_projects: true has_wiki: false + contrib: + allow_merge_commit: false + description: The Falco Project Community + has_projects: true + has_wiki: false deploy-kubernetes: allow_merge_commit: false allow_squash_merge: false @@ -259,6 +264,15 @@ orgs: privacy: closed repos: community: maintain + contrib-maintainers: + description: maintainers of falcosecurity/contrib + members: + - leogr + - maxgio92 + - jasondellaluce + privacy: closed + repos: + community: maintain deploy-kubernetes-maintainers: description: maintainers of falcosecurity/deploy-kubernetes members: @@ -420,6 +434,7 @@ orgs: client-py: admin client-rs: admin community: admin + contrib: admin deploy-kubernetes: admin driverkit: admin event-generator: admin From 11f8fe2f9befb23489314dbd85a04835a716290b Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Wed, 24 Aug 2022 17:19:11 +0200 Subject: [PATCH 40/72] Apply suggestions from code review Co-authored-by: Michele Zuccala Signed-off-by: Leonardo Grasso --- org.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/org.yaml b/org.yaml index a64b8a7e..77f654a2 100644 --- a/org.yaml +++ b/org.yaml @@ -272,7 +272,7 @@ orgs: - jasondellaluce privacy: closed repos: - community: maintain + contrib: maintain deploy-kubernetes-maintainers: description: maintainers of falcosecurity/deploy-kubernetes members: From 64657ae446eb38003bccd490e49363f3329f0678 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Wed, 24 Aug 2022 17:20:37 +0200 Subject: [PATCH 41/72] fix(config): contrib description Co-authored-by: Michele Zuccala Signed-off-by: Leonardo Grasso --- org.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/org.yaml b/org.yaml index 77f654a2..2df28664 100644 --- a/org.yaml +++ b/org.yaml @@ -80,7 +80,7 @@ orgs: has_wiki: false contrib: allow_merge_commit: false - description: The Falco Project Community + description: Community sandbox to test-drive ideas/projects/code has_projects: true has_wiki: false deploy-kubernetes: From 4a1f54c3c92c46568cef864af13fc9790a11ad10 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Tue, 30 Aug 2022 12:16:44 +0200 Subject: [PATCH 42/72] update(config/org): add core-maintainers team Signed-off-by: Leonardo Grasso --- org.yaml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/org.yaml b/org.yaml index 2df28664..d6840d01 100644 --- a/org.yaml +++ b/org.yaml @@ -220,6 +220,23 @@ orgs: privacy: closed repos: advocacy: admin + core-maitainers: + description: Core maintainers of The Falco Project + members: + - andreagit97 + - cpanato + - fededp + - gnosek + - issif + - jasondellaluce + - leogr + - lucaguerra + - maxgio92 + - molter73 + - mstemm + - zuc + privacy: + repos: charts-maintainers: description: maintainers of falcosecurity/charts members: From 056815a0859d9634fb99caf75c6e7557e25ce14b Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Tue, 30 Aug 2022 12:19:29 +0200 Subject: [PATCH 43/72] fix(config/org.yaml): correct type Co-authored-by: Michele Zuccala Signed-off-by: Leonardo Grasso --- org.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/org.yaml b/org.yaml index d6840d01..d00a8694 100644 --- a/org.yaml +++ b/org.yaml @@ -220,7 +220,7 @@ orgs: privacy: closed repos: advocacy: admin - core-maitainers: + core-maintainers: description: Core maintainers of The Falco Project members: - andreagit97 From 173f89b9dfb4b917697af429c2c0dcf7d6e56f8d Mon Sep 17 00:00:00 2001 From: Jason Dellaluce Date: Tue, 30 Aug 2022 12:54:12 +0200 Subject: [PATCH 44/72] update(config/org.yaml): add jasondellaluce to evolution-maintainers team Signed-off-by: Jason Dellaluce --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index d00a8694..8b953a75 100644 --- a/org.yaml +++ b/org.yaml @@ -322,6 +322,7 @@ orgs: members: - leogr - maxgio92 + - jasondellaluce privacy: closed repos: evolution: maintain From 53434258a19b76b6b0d91bc9127c85a1b9d0e736 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Wed, 31 Aug 2022 16:50:56 +0200 Subject: [PATCH 45/72] chore(config/org.yaml): sorting names Signed-off-by: Leonardo Grasso --- org.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/org.yaml b/org.yaml index 8b953a75..84394efc 100644 --- a/org.yaml +++ b/org.yaml @@ -17,14 +17,14 @@ orgs: - thelinuxfoundation members: - - araujof - - Andreagit97 - admiral0 + - Andreagit97 + - araujof - bencer - cpanato - darryk10 - dwindsor - - fededp + - FedeDP - fjogeleit - gnosek - Issif @@ -34,9 +34,9 @@ orgs: - kris-nova - leodido - LucaGuerra - - mfdii - markyjackson-taulia - maxgio92 + - mfdii - mmat11 - Molter73 - terylt From 3c908d253a6c57a3f3cf7a7747dda4baba972fd0 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Wed, 31 Aug 2022 16:52:12 +0200 Subject: [PATCH 46/72] update(config/org.yaml): add empty settings (as templates) Signed-off-by: Leonardo Grasso --- org.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/org.yaml b/org.yaml index 84394efc..dd1e0d81 100644 --- a/org.yaml +++ b/org.yaml @@ -7,6 +7,10 @@ orgs: has_organization_projects: true has_repository_projects: true members_can_create_repositories: false + billing_email: "" + company: "" + email: "" + location: "" admins: - caniszczyk From 88e3662f33ddeb3ff9d2f9974fe31d47bfec521b Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Wed, 31 Aug 2022 17:12:50 +0200 Subject: [PATCH 47/72] update(config/org.yaml): bulk sync from GH APIs Note that in teams, some persons are listed under `maintainers` instead of `members` because they are organization admins. In this context, `maintainers` means "maintainers of the team" (not of the repo). Moving them to `members` is ineffective for GH. Unfortunately, this may be misleading, but there's nothing we can do. Signed-off-by: Leonardo Grasso --- org.yaml | 266 +++++++++++++++++++++++++++++++++++++------------------ 1 file changed, 180 insertions(+), 86 deletions(-) diff --git a/org.yaml b/org.yaml index dd1e0d81..68cd2e43 100644 --- a/org.yaml +++ b/org.yaml @@ -49,164 +49,236 @@ orgs: repos: .github: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false + default_branch: main description: Default community health files has_projects: false has_wiki: false advocacy: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false archived: true description: Advocacy machinery has_projects: true charts: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false description: Community managed Helm charts for running Falco with Kubernetes has_projects: true has_wiki: false client-go: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false description: Go client and SDK for Falco has_projects: true client-py: - archived: true allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false + archived: true description: Python client and SDK for Falco has_projects: true has_wiki: false client-rs: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false archived: true description: The rust language implementation of the Falco client has_projects: true community: allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false + default_branch: main description: The Falco Project Community has_projects: true has_wiki: false contrib: allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false + default_branch: main description: Community sandbox to test-drive ideas/projects/code has_projects: true has_wiki: false deploy-kubernetes: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false + default_branch: main description: Kubernetes deployment resources for Falco has_projects: false has_wiki: false driverkit: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false description: "Kit for building Falco drivers: kernel modules or eBPF probes" has_projects: true ebpf-probe: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false archived: true description: eBPF probe for syscall events has_projects: true event-generator: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false - description: Generate a variety of suspect actions that are detected by Falco rulesets + description: + Generate a variety of suspect actions that are detected by Falco + rulesets has_projects: true evolution: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false + default_branch: main description: Evolution process of The Falco Project has_projects: true has_wiki: false falco: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false description: Cloud Native Runtime Security has_projects: true has_wiki: false homepage: https://falco.org + falco-aws-terraform: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false + default_branch: main + has_projects: true falco-exporter: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false description: Prometheus Metrics Exporter for Falco output events has_projects: true - falco-aws-terraform: - default_branch: main - has_projects: true falco-website: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false description: Hugo content to generate website content. Hosted by the CNCF has_projects: true homepage: https://falco.org falcoctl: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false description: Administrative tooling for Falco has_projects: true has_wiki: false falcosidekick: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false description: Connect Falco to your ecosystem has_projects: true has_wiki: false falcosidekick-ui: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false description: A simple WebUI with latest events from Falco has_projects: true has_wiki: false - katacoda-scenarios: - archived: true - allow_merge_commit: false - allow_squash_merge: false - description: Content more https://katacoda.com/falco/ - has_projects: false - has_wiki: false kernel-crawler: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false + default_branch: main description: A tool to crawl Linux kernel versions has_projects: false has_wiki: false kernel-module: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false archived: true has_projects: true kilt: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false description: Kilt is a project that defines how to inject foreign apps into containers - has_projects: false + has_projects: true has_wiki: false libs: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false - description: libsinsp, libscap, the kernel module driver, and the eBPF driver sources + description: + libsinsp, libscap, the kernel module driver, and the eBPF driver + sources has_projects: true has_wiki: false libs-sdk-go: allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false + default_branch: main description: Go SDK for Falco libs has_projects: true has_wiki: false libscap: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false archived: true has_projects: true libsinsp: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false archived: true - description: System inspection library + description: "System inspection library " has_projects: true pdig: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false archived: true description: ptrace-based event producer for udig has_projects: true has_wiki: false plugin-sdk-cpp: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false has_projects: true plugin-sdk-go: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false default_branch: main has_projects: true plugins: + allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false + description: Falco plugins registry has_projects: true template-repository: - archived: true allow_merge_commit: false + allow_rebase_merge: false allow_squash_merge: false + archived: true description: Acts as a template for new repositories has_projects: true test-infra: allow_merge_commit: false + allow_rebase_merge: false + allow_squash_merge: false description: Falco workflow & testing infrastructure has_projects: true has_wiki: false @@ -215,7 +287,7 @@ orgs: teams: admins: description: admins of the org - members: + maintainers: - caniszczyk - ldegio - leogr @@ -224,37 +296,22 @@ orgs: privacy: closed repos: advocacy: admin - core-maintainers: - description: Core maintainers of The Falco Project - members: - - andreagit97 - - cpanato - - fededp - - gnosek - - issif - - jasondellaluce - - leogr - - lucaguerra - - maxgio92 - - molter73 - - mstemm - - zuc - privacy: - repos: charts-maintainers: description: maintainers of falcosecurity/charts - members: + maintainers: - leogr - - Issif + members: - cpanato + - Issif privacy: closed repos: charts: maintain client-go-maintainers: description: maintainers of falcosecurity/client-go + maintainers: + - leogr members: - leodido - - leogr privacy: closed repos: client-go: maintain @@ -275,32 +332,52 @@ orgs: client-rs: maintain community-maintainers: description: maintainers of falcosecurity/community - members: + maintainers: - leogr + members: - Issif - - Andreagit97 - - terylt - - maxgio92 - araujof + - maxgio92 + - terylt + - Andreagit97 privacy: closed repos: community: maintain contrib-maintainers: description: maintainers of falcosecurity/contrib - members: + maintainers: - leogr + members: - maxgio92 - jasondellaluce privacy: closed repos: contrib: maintain + core-maintainers: + description: Core maintainers of The Falco Project + maintainers: + - leogr + - mstemm + members: + - gnosek + - cpanato + - Issif + - FedeDP + - maxgio92 + - zuc + - jasondellaluce + - Molter73 + - LucaGuerra + - Andreagit97 + privacy: closed deploy-kubernetes-maintainers: description: maintainers of falcosecurity/deploy-kubernetes - members: + maintainers: - leogr + members: - maxgio92 - - jasondellaluce - zuc + - jasondellaluce privacy: closed repos: deploy-kubernetes: maintain @@ -309,22 +386,24 @@ orgs: members: - leodido - dwindsor - - fededp + - FedeDP privacy: closed repos: driverkit: maintain event-generator-maintainers: description: maintainers of falcosecurity/event-generator - members: + maintainers: - leogr - - fededp + members: + - FedeDP privacy: closed repos: event-generator: maintain evolution-maintainers: description: maintainers of falcosecurity/evolution - members: + maintainers: - leogr + members: - maxgio92 - jasondellaluce privacy: closed @@ -332,55 +411,60 @@ orgs: evolution: maintain falco-aws-terraform-maintainers: description: maintainers of falcosecurity/falco-aws-terraform - members: - - mstemm - - leogr - - jasondellaluce + maintainers: - ldegio + - leogr + - mstemm + members: - zuc + - jasondellaluce privacy: closed repos: falco-aws-terraform: maintain falco-exporter-maintainers: description: maintainers of falcosecurity/falco-exporter - members: + maintainers: - leogr + members: - jasondellaluce privacy: closed repos: falco-exporter: maintain falco-maintainers: description: maintainers of falcosecurity/falco - members: - - mstemm + maintainers: - leogr + - mstemm + members: + - FedeDP - jasondellaluce - - fededp privacy: closed repos: falco: maintain falco-website-maintainers: description: maintainers of falcosecurity/falco-website - members: + maintainers: - leogr - - jasondellaluce + members: - Issif + - jasondellaluce privacy: closed repos: falco-website: maintain falcoctl-maintainers: description: maintainers of falcosecurity/falcoctl - members: + maintainers: - leogr privacy: closed repos: falcoctl: maintain falcosidekick-maintainers: description: maintainers of falcosecurity/falcosidekick - members: - - Issif + maintainers: - leogr + members: - cpanato + - Issif - fjogeleit privacy: closed repos: @@ -388,25 +472,28 @@ orgs: falcosidekick-ui-maintainers: description: maintainers of falcosecurity/falcosidekick-ui members: - - Issif - cpanato + - Issif - fjogeleit privacy: closed repos: falcosidekick-ui: maintain github-maintainers: description: maintainers of falcosecurity/.github - members: + maintainers: - leogr + members: - maxgio92 + privacy: closed repos: .github: maintain kernel-crawler-maintainers: description: maintainers of falcosecurity/kernel-crawler + maintainers: + - leogr members: - - fededp + - FedeDP - maxgio92 - - leogr - zuc privacy: closed repos: @@ -414,39 +501,41 @@ orgs: kilt-maintainers: description: maintainers of falcosecurity/kilt members: - - admiral0 - - leodido - gnosek + - leodido + - admiral0 privacy: closed repos: kilt: maintain libs-maintainers: description: maintainers of falcosecurity/libs - members: + maintainers: - leogr - - gnosek - mstemm - - fededp - - andreagit97 - - molter73 + members: + - gnosek + - FedeDP + - Molter73 - LucaGuerra + - Andreagit97 privacy: closed repos: libs: maintain libs-sdk-go-maintainers: description: maintainers of falcosecurity/libs-sdk-go + maintainers: + - leogr members: - araujof - - terylt - - leogr - jasondellaluce - - andreagit97 + - terylt + - Andreagit97 privacy: closed repos: libs-sdk-go: maintain machine_users: description: bots - members: + maintainers: - poiana privacy: closed repos: @@ -479,8 +568,9 @@ orgs: test-infra: admin pdig-maintainers: description: maintainers of falcosecurity/pdig - members: + maintainers: - ldegio + members: - gnosek - leodido privacy: closed @@ -488,39 +578,43 @@ orgs: pdig: maintain plugin-sdk-cpp-maintainers: description: maintainers of falcosecurity/plugin-sdk-cpp - members: + maintainers: - ldegio - - leodido - - mstemm - leogr - - fededp + - mstemm + members: + - leodido + - FedeDP privacy: closed repos: plugin-sdk-cpp: maintain plugin-sdk-go-maintainers: description: maintainers of falcosecurity/plugin-sdk-go - members: + maintainers: - leogr + members: - jasondellaluce privacy: closed repos: plugin-sdk-go: maintain plugins-maintainers: description: maintainers of falcosecurity/plugins - members: - - mstemm + maintainers: - leogr + - mstemm + members: - jasondellaluce privacy: closed repos: plugins: maintain test-infra-maintainers: description: maintainers of falcosecurity/test-infra + maintainers: + - leogr members: - maxgio92 - - jonahjon - - leogr - zuc + - jonahjon privacy: closed repos: test-infra: maintain From 8f706a0758c3b505a5fc088f25040e4ceaa386c6 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Wed, 31 Aug 2022 17:40:54 +0200 Subject: [PATCH 48/72] chore(config/org.yaml): add missing descriptions Signed-off-by: Leonardo Grasso --- org.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/org.yaml b/org.yaml index 68cd2e43..aa3da34c 100644 --- a/org.yaml +++ b/org.yaml @@ -156,6 +156,7 @@ orgs: allow_merge_commit: false allow_rebase_merge: false allow_squash_merge: false + description: Terraform Module for Falco AWS Resources default_branch: main has_projects: true falco-exporter: @@ -168,7 +169,7 @@ orgs: allow_merge_commit: false allow_rebase_merge: false allow_squash_merge: false - description: Hugo content to generate website content. Hosted by the CNCF + description: Source code of the official Falco website has_projects: true homepage: https://falco.org falcoctl: @@ -255,11 +256,13 @@ orgs: allow_merge_commit: false allow_rebase_merge: false allow_squash_merge: false + description: Falco plugins SDK for C++ has_projects: true plugin-sdk-go: allow_merge_commit: false allow_rebase_merge: false allow_squash_merge: false + description: Falco plugins SDK for Go default_branch: main has_projects: true plugins: From f27b15c402038a8c35ae808fa66a83e24fd9fbce Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Fri, 2 Sep 2022 10:12:22 +0200 Subject: [PATCH 49/72] fix(config/org.yaml): remove empty fields See https://prow.falco.org/log?job=peribolos-post-submit&id=1565594745181310976 Signed-off-by: Leonardo Grasso --- org.yaml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/org.yaml b/org.yaml index aa3da34c..171ea060 100644 --- a/org.yaml +++ b/org.yaml @@ -7,10 +7,6 @@ orgs: has_organization_projects: true has_repository_projects: true members_can_create_repositories: false - billing_email: "" - company: "" - email: "" - location: "" admins: - caniszczyk From 86b576885c1ac9fa4a9668ec61680958c43518c5 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Fri, 2 Sep 2022 10:43:23 +0200 Subject: [PATCH 50/72] fix(config/org.yaml): at least one merge strategy is needed See https://prow.falco.org/log?job=peribolos-post-submit&id=1565617145339973632 Signed-off-by: Leonardo Grasso --- org.yaml | 66 ++++++++++++++++++++++++++++---------------------------- 1 file changed, 33 insertions(+), 33 deletions(-) diff --git a/org.yaml b/org.yaml index 171ea060..4eea2a12 100644 --- a/org.yaml +++ b/org.yaml @@ -46,7 +46,7 @@ orgs: repos: .github: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false default_branch: main description: Default community health files @@ -54,27 +54,27 @@ orgs: has_wiki: false advocacy: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false archived: true description: Advocacy machinery has_projects: true charts: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Community managed Helm charts for running Falco with Kubernetes has_projects: true has_wiki: false client-go: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Go client and SDK for Falco has_projects: true client-py: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false archived: true description: Python client and SDK for Falco @@ -82,14 +82,14 @@ orgs: has_wiki: false client-rs: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false archived: true description: The rust language implementation of the Falco client has_projects: true community: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false default_branch: main description: The Falco Project Community @@ -97,7 +97,7 @@ orgs: has_wiki: false contrib: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false default_branch: main description: Community sandbox to test-drive ideas/projects/code @@ -105,7 +105,7 @@ orgs: has_wiki: false deploy-kubernetes: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false default_branch: main description: Kubernetes deployment resources for Falco @@ -113,20 +113,20 @@ orgs: has_wiki: false driverkit: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: "Kit for building Falco drivers: kernel modules or eBPF probes" has_projects: true ebpf-probe: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false archived: true description: eBPF probe for syscall events has_projects: true event-generator: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Generate a variety of suspect actions that are detected by Falco @@ -134,7 +134,7 @@ orgs: has_projects: true evolution: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false default_branch: main description: Evolution process of The Falco Project @@ -142,7 +142,7 @@ orgs: has_wiki: false falco: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Cloud Native Runtime Security has_projects: true @@ -150,48 +150,48 @@ orgs: homepage: https://falco.org falco-aws-terraform: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Terraform Module for Falco AWS Resources default_branch: main has_projects: true falco-exporter: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Prometheus Metrics Exporter for Falco output events has_projects: true falco-website: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Source code of the official Falco website has_projects: true homepage: https://falco.org falcoctl: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Administrative tooling for Falco has_projects: true has_wiki: false falcosidekick: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Connect Falco to your ecosystem has_projects: true has_wiki: false falcosidekick-ui: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: A simple WebUI with latest events from Falco has_projects: true has_wiki: false kernel-crawler: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false default_branch: main description: A tool to crawl Linux kernel versions @@ -199,20 +199,20 @@ orgs: has_wiki: false kernel-module: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false archived: true has_projects: true kilt: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Kilt is a project that defines how to inject foreign apps into containers has_projects: true has_wiki: false libs: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: libsinsp, libscap, the kernel module driver, and the eBPF driver @@ -221,7 +221,7 @@ orgs: has_wiki: false libs-sdk-go: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false default_branch: main description: Go SDK for Falco libs @@ -229,20 +229,20 @@ orgs: has_wiki: false libscap: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false archived: true has_projects: true libsinsp: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false archived: true description: "System inspection library " has_projects: true pdig: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false archived: true description: ptrace-based event producer for udig @@ -250,33 +250,33 @@ orgs: has_wiki: false plugin-sdk-cpp: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Falco plugins SDK for C++ has_projects: true plugin-sdk-go: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Falco plugins SDK for Go default_branch: main has_projects: true plugins: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Falco plugins registry has_projects: true template-repository: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false archived: true description: Acts as a template for new repositories has_projects: true test-infra: allow_merge_commit: false - allow_rebase_merge: false + allow_rebase_merge: true allow_squash_merge: false description: Falco workflow & testing infrastructure has_projects: true From 817e14a9244316ea602949f7b894c6f352471047 Mon Sep 17 00:00:00 2001 From: Jason Dellaluce Date: Fri, 2 Sep 2022 12:17:07 +0200 Subject: [PATCH 51/72] update(config/org.yaml): add jasondellaluce to github-maintainers team Signed-off-by: Jason Dellaluce --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index 4eea2a12..2167783f 100644 --- a/org.yaml +++ b/org.yaml @@ -483,6 +483,7 @@ orgs: - leogr members: - maxgio92 + - jasondellaluce privacy: closed repos: .github: maintain From e770aaeb3ec6e4a85bed42690eae2026f21d129d Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Fri, 2 Sep 2022 12:37:55 +0200 Subject: [PATCH 52/72] update(org): add Andrea Terzolo as a Falco maintainer Signed-off-by: Andrea Terzolo --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index 2167783f..df156aad 100644 --- a/org.yaml +++ b/org.yaml @@ -437,6 +437,7 @@ orgs: members: - FedeDP - jasondellaluce + - Andreagit97 privacy: closed repos: falco: maintain From 0f61b4ab4fb0817724a88f9dc7711f4402ae94fe Mon Sep 17 00:00:00 2001 From: Jason Dellaluce Date: Thu, 8 Sep 2022 10:55:58 +0200 Subject: [PATCH 53/72] update(config/org.yaml): add jsondellaluce as admin Signed-off-by: Jason Dellaluce --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index df156aad..9ccb9d0c 100644 --- a/org.yaml +++ b/org.yaml @@ -15,6 +15,7 @@ orgs: - mstemm - poiana - thelinuxfoundation + - jasondellaluce members: - admiral0 From 504ee45e95f61ca063634dda5a478633296ba8c7 Mon Sep 17 00:00:00 2001 From: Jason Dellaluce Date: Thu, 8 Sep 2022 10:59:44 +0200 Subject: [PATCH 54/72] update(config/org.yaml): remove jasondellaluce from org members Signed-off-by: Jason Dellaluce --- org.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/org.yaml b/org.yaml index 9ccb9d0c..0373d36f 100644 --- a/org.yaml +++ b/org.yaml @@ -29,7 +29,6 @@ orgs: - fjogeleit - gnosek - Issif - - jasondellaluce - jonahjon - Kaizhe - kris-nova From 53d214c7529e446cbc762869058bf03b9ce1099f Mon Sep 17 00:00:00 2001 From: Hendrik Brueckner Date: Fri, 9 Sep 2022 14:42:58 +0200 Subject: [PATCH 55/72] update(config/org.yaml): add hbrueckner to org members Signed-off-by: Hendrik Brueckner --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index 0373d36f..b769f4f8 100644 --- a/org.yaml +++ b/org.yaml @@ -28,6 +28,7 @@ orgs: - FedeDP - fjogeleit - gnosek + - hbrueckner - Issif - jonahjon - Kaizhe From e51ddbb86a3a8c049adb0f04e9c155fe5df36589 Mon Sep 17 00:00:00 2001 From: Aldo Lacuku Date: Mon, 12 Sep 2022 15:19:54 +0200 Subject: [PATCH 56/72] update(config/org.yaml): add alacuku to org members Signed-off-by: Aldo Lacuku --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index b769f4f8..8d9eb0d1 100644 --- a/org.yaml +++ b/org.yaml @@ -19,6 +19,7 @@ orgs: members: - admiral0 + - alacuku - Andreagit97 - araujof - bencer From d6e3ed92e7c0bd85ebf9bf2806dd8d1b95246fc6 Mon Sep 17 00:00:00 2001 From: Lorenzo Susini Date: Thu, 15 Sep 2022 10:00:36 +0000 Subject: [PATCH 57/72] update(config): add loresuso to org members Signed-off-by: Lorenzo Susini --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index 8d9eb0d1..87a0707f 100644 --- a/org.yaml +++ b/org.yaml @@ -35,6 +35,7 @@ orgs: - Kaizhe - kris-nova - leodido + - loresuso - LucaGuerra - markyjackson-taulia - maxgio92 From a8d3408f43a8afeb1946fef23f44948ff1362a14 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Tue, 20 Sep 2022 15:21:36 +0200 Subject: [PATCH 58/72] update(org.yalm): sync falcoctl owners Signed-off-by: Leonardo Grasso --- org.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/org.yaml b/org.yaml index 87a0707f..8473e4dc 100644 --- a/org.yaml +++ b/org.yaml @@ -458,6 +458,11 @@ orgs: description: maintainers of falcosecurity/falcoctl maintainers: - leogr + members: + - zuc + - maxgio92 + - fededp + - cpanato privacy: closed repos: falcoctl: maintain From 4c93d227b4ce7ea03238b224a921a4aee972c076 Mon Sep 17 00:00:00 2001 From: Leonardo Grasso Date: Tue, 18 Oct 2022 11:32:17 +0200 Subject: [PATCH 59/72] fix(config/org.yaml): GH username changed Signed-off-by: Leonardo Grasso --- org.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/org.yaml b/org.yaml index 8473e4dc..6930aa1c 100644 --- a/org.yaml +++ b/org.yaml @@ -33,7 +33,7 @@ orgs: - Issif - jonahjon - Kaizhe - - kris-nova + - krisnova - leodido - loresuso - LucaGuerra From 32dd5202c34a2484a5d01fe3572271489ac5517f Mon Sep 17 00:00:00 2001 From: Logan Bond Date: Wed, 2 Nov 2022 11:31:30 -0500 Subject: [PATCH 60/72] add EXONER4TED as org member Signed-off-by: Logan Bond --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index 6930aa1c..2cc83fe7 100644 --- a/org.yaml +++ b/org.yaml @@ -26,6 +26,7 @@ orgs: - cpanato - darryk10 - dwindsor + - EXONER4TED - FedeDP - fjogeleit - gnosek From c7e621eb43c133da8c2e1fb2812432613249d484 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Fri, 4 Nov 2022 15:31:35 +0100 Subject: [PATCH 61/72] new(config): added syscalls-bumper repo. Signed-off-by: Federico Di Pierro --- org.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/org.yaml b/org.yaml index 2cc83fe7..669169bd 100644 --- a/org.yaml +++ b/org.yaml @@ -271,6 +271,14 @@ orgs: allow_squash_merge: false description: Falco plugins registry has_projects: true + syscalls-bumper: + allow_merge_commit: false + allow_rebase_merge: true + allow_squash_merge: false + default_branch: main + description: A tool to automatically update supported syscalls in libs + has_projects: false + has_wiki: false template-repository: allow_merge_commit: false allow_rebase_merge: true @@ -575,6 +583,7 @@ orgs: plugin-sdk-cpp: admin plugin-sdk-go: admin plugins: admin + syscalls-bumper: admin test-infra: admin pdig-maintainers: description: maintainers of falcosecurity/pdig From 83e8395fd83b3b4e82a9f4e814f0e5ca1540f37b Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Fri, 4 Nov 2022 15:32:04 +0100 Subject: [PATCH 62/72] chore(config): add EXONER4TED to driverkit maintainers list. Signed-off-by: Federico Di Pierro --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index 669169bd..2ecf13f9 100644 --- a/org.yaml +++ b/org.yaml @@ -398,6 +398,7 @@ orgs: - leodido - dwindsor - FedeDP + - EXONER4TED privacy: closed repos: driverkit: maintain From 6e15419aa6ecaa8ea754aec0e553844c6a04ee48 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Mon, 7 Nov 2022 15:27:05 +0100 Subject: [PATCH 63/72] fix(config): add syscalls-bumper-maintainers section. Signed-off-by: Federico Di Pierro --- org.yaml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/org.yaml b/org.yaml index 2ecf13f9..d54ca5cb 100644 --- a/org.yaml +++ b/org.yaml @@ -627,6 +627,16 @@ orgs: privacy: closed repos: plugins: maintain + syscalls-bumper-maintainers: + description: maintainers of falcosecurity/syscalls-bumper + maintainers: + - leogr + members: + - FedeDP + - Andreagit97 + privacy: closed + repos: + syscalls-bumper: maintain test-infra-maintainers: description: maintainers of falcosecurity/test-infra maintainers: From 59bd2f17c5b6798c33249f71e4d26eacbbdeaa66 Mon Sep 17 00:00:00 2001 From: Hendrik Brueckner Date: Tue, 6 Dec 2022 09:29:55 +0100 Subject: [PATCH 64/72] update(config/org.yaml): add hbrueckner as member to lib-maintainers Signed-off-by: Hendrik Brueckner --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index d54ca5cb..1a3107cc 100644 --- a/org.yaml +++ b/org.yaml @@ -537,6 +537,7 @@ orgs: - Molter73 - LucaGuerra - Andreagit97 + - hbrueckner privacy: closed repos: libs: maintain From c5d098c8eda32f650ff9363425e29caf5754001d Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Tue, 13 Dec 2022 12:57:09 +0100 Subject: [PATCH 65/72] chore(config): add fededp as test-infra-maintainers to org. Signed-off-by: Federico Di Pierro --- org.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/org.yaml b/org.yaml index 1a3107cc..591c5912 100644 --- a/org.yaml +++ b/org.yaml @@ -646,6 +646,7 @@ orgs: - maxgio92 - zuc - jonahjon + - fededp privacy: closed repos: test-infra: maintain From 2903f141f0192dc010e639898fca0a18cc08772a Mon Sep 17 00:00:00 2001 From: Luca Guerra Date: Thu, 22 Dec 2022 15:07:15 +0000 Subject: [PATCH 66/72] new(config): add falcosecurity/rules repository config Signed-off-by: Luca Guerra --- org.yaml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/org.yaml b/org.yaml index 591c5912..8e0accf3 100644 --- a/org.yaml +++ b/org.yaml @@ -271,6 +271,13 @@ orgs: allow_squash_merge: false description: Falco plugins registry has_projects: true + rules: + allow_merge_commit: false + allow_rebase_merge: true + allow_squash_merge: false + description: Falco rule repository + has_projects: false + has_wiki: false syscalls-bumper: allow_merge_commit: false allow_rebase_merge: true @@ -628,6 +635,14 @@ orgs: privacy: closed repos: plugins: maintain + rules-maintainers: + description: maintainers of falcosecurity/rules + maintainers: + - leogr + - LucaGuerra + privacy: closed + repos: + rules: maintain syscalls-bumper-maintainers: description: maintainers of falcosecurity/syscalls-bumper maintainers: From db7320a9f17e6685f6758e9165196a6a42b69cce Mon Sep 17 00:00:00 2001 From: Luca Guerra Date: Mon, 9 Jan 2023 12:45:08 +0000 Subject: [PATCH 67/72] new(org): add LucaGuerra as admin Signed-off-by: Luca Guerra --- org.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/org.yaml b/org.yaml index 8e0accf3..0ee13d73 100644 --- a/org.yaml +++ b/org.yaml @@ -16,6 +16,7 @@ orgs: - poiana - thelinuxfoundation - jasondellaluce + - LucaGuerra members: - admiral0 @@ -37,7 +38,6 @@ orgs: - krisnova - leodido - loresuso - - LucaGuerra - markyjackson-taulia - maxgio92 - mfdii From a88204ca7e883561b9f8c8ca6270b9ee03502886 Mon Sep 17 00:00:00 2001 From: Federico Di Pierro Date: Tue, 17 Jan 2023 14:20:32 +0100 Subject: [PATCH 68/72] fix(config): fixed falcosecurity/rules members. Signed-off-by: Federico Di Pierro --- org.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/org.yaml b/org.yaml index 0ee13d73..9ea208aa 100644 --- a/org.yaml +++ b/org.yaml @@ -640,6 +640,11 @@ orgs: maintainers: - leogr - LucaGuerra + members: + - fededp + - jasondellaluce + - andreagit97 + - mstemm privacy: closed repos: rules: maintain From e2e635ed66cd81dd575cdc2b51a60967e06c6eb5 Mon Sep 17 00:00:00 2001 From: Massimiliano Giovagnoli Date: Tue, 6 Sep 2022 14:11:24 +0200 Subject: [PATCH 69/72] ci: add initial support for peribolos jobs Signed-off-by: Massimiliano Giovagnoli --- .prow/peribolos.yaml | 111 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 111 insertions(+) create mode 100644 .prow/peribolos.yaml diff --git a/.prow/peribolos.yaml b/.prow/peribolos.yaml new file mode 100644 index 00000000..ace07a55 --- /dev/null +++ b/.prow/peribolos.yaml @@ -0,0 +1,111 @@ +presubmits: + falcosecurity/evolution: + - name: peribolos-pre-submit + branches: + - ^master$ + decorate: true + max_concurrency: 1 + skip_report: false + run_if_changed: '^people/org.yaml$|^.prow/peribolos.yaml$' + spec: + containers: + - image: gcr.io/k8s-prow/peribolos:v20220901-5db9cf5fa2 + command: + - peribolos + args: + - --config-path=people/org.yaml + - --fix-org + - --fix-org-members + - --fix-repos + - --fix-teams + - --fix-team-members + - --fix-team-repos + - --github-endpoint=http://ghproxy.default.svc.cluster.local + - --github-endpoint=https://api.github.com + - --github-hourly-tokens=1200 + - --github-token-path=/etc/github-token/oauth + volumeMounts: + - name: github + mountPath: /etc/github-token + volumes: + - name: github + secret: + secretName: oauth-token + nodeSelector: + Archtype: "x86" + +postsubmits: + falcosecurity/evolution: + - name: peribolos-post-submit + branches: + - ^master$ + decorate: true + max_concurrency: 1 + skip_report: false + run_if_changed: '^people/org.yaml$|^.prow/peribolos.yaml$' + spec: + containers: + - image: gcr.io/k8s-prow/peribolos:v20220901-5db9cf5fa2 + command: + - peribolos + args: + - --confirm + - --config-path=people/org.yaml + - --fix-org + - --fix-org-members + - --fix-repos + - --fix-teams + - --fix-team-members + - --fix-team-repos + - --github-endpoint=http://ghproxy.default.svc.cluster.local + - --github-endpoint=https://api.github.com + - --github-hourly-tokens=1200 + - --github-token-path=/etc/github-token/oauth + volumeMounts: + - name: github + mountPath: /etc/github-token + volumes: + - name: github + secret: + secretName: oauth-token + nodeSelector: + Archtype: "x86" + +periodics: + - name: peribolos-periodic + interval: 24h + decorate: true + max_concurrency: 1 + skip_report: false + always_run: true + extra_refs: + - org: falcosecurity + repo: evolution + base_ref: master + spec: + containers: + - image: gcr.io/k8s-prow/peribolos:v20220901-5db9cf5fa2 + command: + - peribolos + args: + - --confirm + - --config-path=people/org.yaml + - --fix-org + - --fix-org-members + - --fix-repos + - --fix-teams + - --fix-team-members + - --fix-team-repos + - --github-endpoint=http://ghproxy.default.svc.cluster.local + - --github-endpoint=https://api.github.com + - --github-hourly-tokens=1200 + - --github-token-path=/etc/github-token/oauth + volumeMounts: + - name: github + mountPath: /etc/github-token + volumes: + - name: github + secret: + secretName: oauth-token + nodeSelector: + Archtype: "x86" From 11faa4ca6b3f0e1810d40e650cb00237e8dd8f67 Mon Sep 17 00:00:00 2001 From: Massimiliano Giovagnoli Date: Tue, 6 Sep 2022 14:12:27 +0200 Subject: [PATCH 70/72] feat: add org.yaml Signed-off-by: Massimiliano Giovagnoli --- .prow/peribolos.yaml | 16 ++++++++-------- org.yaml => org/org.yaml | 0 2 files changed, 8 insertions(+), 8 deletions(-) rename org.yaml => org/org.yaml (100%) diff --git a/.prow/peribolos.yaml b/.prow/peribolos.yaml index ace07a55..aab45636 100644 --- a/.prow/peribolos.yaml +++ b/.prow/peribolos.yaml @@ -2,18 +2,18 @@ presubmits: falcosecurity/evolution: - name: peribolos-pre-submit branches: - - ^master$ + - ^main$ decorate: true max_concurrency: 1 skip_report: false - run_if_changed: '^people/org.yaml$|^.prow/peribolos.yaml$' + run_if_changed: '^org/org.yaml$|^.prow/peribolos.yaml$' spec: containers: - image: gcr.io/k8s-prow/peribolos:v20220901-5db9cf5fa2 command: - peribolos args: - - --config-path=people/org.yaml + - --config-path=org/org.yaml - --fix-org - --fix-org-members - --fix-repos @@ -38,11 +38,11 @@ postsubmits: falcosecurity/evolution: - name: peribolos-post-submit branches: - - ^master$ + - ^main$ decorate: true max_concurrency: 1 skip_report: false - run_if_changed: '^people/org.yaml$|^.prow/peribolos.yaml$' + run_if_changed: '^org/org.yaml$|^.prow/peribolos.yaml$' spec: containers: - image: gcr.io/k8s-prow/peribolos:v20220901-5db9cf5fa2 @@ -50,7 +50,7 @@ postsubmits: - peribolos args: - --confirm - - --config-path=people/org.yaml + - --config-path=org/org.yaml - --fix-org - --fix-org-members - --fix-repos @@ -81,7 +81,7 @@ periodics: extra_refs: - org: falcosecurity repo: evolution - base_ref: master + base_ref: main spec: containers: - image: gcr.io/k8s-prow/peribolos:v20220901-5db9cf5fa2 @@ -89,7 +89,7 @@ periodics: - peribolos args: - --confirm - - --config-path=people/org.yaml + - --config-path=org/org.yaml - --fix-org - --fix-org-members - --fix-repos diff --git a/org.yaml b/org/org.yaml similarity index 100% rename from org.yaml rename to org/org.yaml From f7527c4ba6ff6533b42773286fe0cb10ec7a81bc Mon Sep 17 00:00:00 2001 From: Massimiliano Giovagnoli Date: Tue, 17 Jan 2023 17:34:49 +0100 Subject: [PATCH 71/72] ci(peribolos): bump peribolos version Signed-off-by: Massimiliano Giovagnoli --- .prow/peribolos.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.prow/peribolos.yaml b/.prow/peribolos.yaml index aab45636..d842e8dc 100644 --- a/.prow/peribolos.yaml +++ b/.prow/peribolos.yaml @@ -9,7 +9,7 @@ presubmits: run_if_changed: '^org/org.yaml$|^.prow/peribolos.yaml$' spec: containers: - - image: gcr.io/k8s-prow/peribolos:v20220901-5db9cf5fa2 + - image: gcr.io/k8s-prow/peribolos:v20230106-0de7d15106 command: - peribolos args: @@ -45,7 +45,7 @@ postsubmits: run_if_changed: '^org/org.yaml$|^.prow/peribolos.yaml$' spec: containers: - - image: gcr.io/k8s-prow/peribolos:v20220901-5db9cf5fa2 + - image: gcr.io/k8s-prow/peribolos:v20230106-0de7d15106 command: - peribolos args: @@ -84,7 +84,7 @@ periodics: base_ref: main spec: containers: - - image: gcr.io/k8s-prow/peribolos:v20220901-5db9cf5fa2 + - image: gcr.io/k8s-prow/peribolos:v20230106-0de7d15106 command: - peribolos args: From 5a2e6f4b79bee008247b64a065724420c02cf752 Mon Sep 17 00:00:00 2001 From: Massimiliano Giovagnoli Date: Wed, 15 Feb 2023 16:03:54 +0100 Subject: [PATCH 72/72] revert(prow/peribolos): add initial support for peribolos in-repo jobs Signed-off-by: Massimiliano Giovagnoli --- .prow/peribolos.yaml | 111 ------------------------------------------- 1 file changed, 111 deletions(-) delete mode 100644 .prow/peribolos.yaml diff --git a/.prow/peribolos.yaml b/.prow/peribolos.yaml deleted file mode 100644 index d842e8dc..00000000 --- a/.prow/peribolos.yaml +++ /dev/null @@ -1,111 +0,0 @@ -presubmits: - falcosecurity/evolution: - - name: peribolos-pre-submit - branches: - - ^main$ - decorate: true - max_concurrency: 1 - skip_report: false - run_if_changed: '^org/org.yaml$|^.prow/peribolos.yaml$' - spec: - containers: - - image: gcr.io/k8s-prow/peribolos:v20230106-0de7d15106 - command: - - peribolos - args: - - --config-path=org/org.yaml - - --fix-org - - --fix-org-members - - --fix-repos - - --fix-teams - - --fix-team-members - - --fix-team-repos - - --github-endpoint=http://ghproxy.default.svc.cluster.local - - --github-endpoint=https://api.github.com - - --github-hourly-tokens=1200 - - --github-token-path=/etc/github-token/oauth - volumeMounts: - - name: github - mountPath: /etc/github-token - volumes: - - name: github - secret: - secretName: oauth-token - nodeSelector: - Archtype: "x86" - -postsubmits: - falcosecurity/evolution: - - name: peribolos-post-submit - branches: - - ^main$ - decorate: true - max_concurrency: 1 - skip_report: false - run_if_changed: '^org/org.yaml$|^.prow/peribolos.yaml$' - spec: - containers: - - image: gcr.io/k8s-prow/peribolos:v20230106-0de7d15106 - command: - - peribolos - args: - - --confirm - - --config-path=org/org.yaml - - --fix-org - - --fix-org-members - - --fix-repos - - --fix-teams - - --fix-team-members - - --fix-team-repos - - --github-endpoint=http://ghproxy.default.svc.cluster.local - - --github-endpoint=https://api.github.com - - --github-hourly-tokens=1200 - - --github-token-path=/etc/github-token/oauth - volumeMounts: - - name: github - mountPath: /etc/github-token - volumes: - - name: github - secret: - secretName: oauth-token - nodeSelector: - Archtype: "x86" - -periodics: - - name: peribolos-periodic - interval: 24h - decorate: true - max_concurrency: 1 - skip_report: false - always_run: true - extra_refs: - - org: falcosecurity - repo: evolution - base_ref: main - spec: - containers: - - image: gcr.io/k8s-prow/peribolos:v20230106-0de7d15106 - command: - - peribolos - args: - - --confirm - - --config-path=org/org.yaml - - --fix-org - - --fix-org-members - - --fix-repos - - --fix-teams - - --fix-team-members - - --fix-team-repos - - --github-endpoint=http://ghproxy.default.svc.cluster.local - - --github-endpoint=https://api.github.com - - --github-hourly-tokens=1200 - - --github-token-path=/etc/github-token/oauth - volumeMounts: - - name: github - mountPath: /etc/github-token - volumes: - - name: github - secret: - secretName: oauth-token - nodeSelector: - Archtype: "x86"