Addon: falco

Compatibility:
Source: See falco website for details.

Falco is a cloud-native security tool designed for Linux systems. It employs custom rules on kernel events, which are enriched with container and Kubernetes metadata, to provide real-time alerts. Falco helps you gain visibility into abnormal behavior, potential security threats, and compliance violations, contributing to comprehensive runtime security.

To enable the addon:

microk8s enable falco

The addon can be disabled at any time with:

microk8s disable falco