apiVersion: v1
kind: Pod
metadata:
  annotations:
    cni.projectcalico.org/containerID: 58a03635888386cfcada316f91270d9a0a211b3d7790b8d56119ba07096ead04
    cni.projectcalico.org/podIP: 192.168.0.138/32
    cni.projectcalico.org/podIPs: 192.168.0.138/32
    kubectl.kubernetes.io/restartedAt: "2026-11-09T06:08:42Z"
    rules-checksum: 11733ad4cb3ba0d9902b6c54d0e21d52b51ba2b6e87e138feb1bd47e65f10a62
    secret-checksum: 74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
  creationTimestamp: "2026-11-09T06:08:42Z"
  generateName: falco-talon-75cd9ff78f-
  generation: 1
  labels:
    app.kubernetes.io/instance: falco-talon
    app.kubernetes.io/name: falco-talon
    pod-template-hash: 75cd9ff78f
  name: falco-talon-75cd9ff78f-jqg2z
  namespace: falco
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: ReplicaSet
    name: falco-talon-75cd9ff78f
    uid: 5609168f-d311-461a-ab58-aa3b4aefe600
  resourceVersion: "2876"
  uid: 5b402589-da07-4749-b1b5-f030a77d3621
spec:
  containers:
  - args:
    - server
    - -c
    - /etc/falco-talon/config.yaml
    - -r
    - /etc/falco-talon/rules.yaml
    env:
    - name: LOG_LEVEL
      value: info
    - name: LOG_FORMAT
      value: text
    image: falco.docker.scarf.sh/falcosecurity/falco-talon:0.3.0
    imagePullPolicy: Always
    livenessProbe:
      failureThreshold: 3
      httpGet:
        path: /healthz
        port: http
        scheme: HTTP
      initialDelaySeconds: 10
      periodSeconds: 5
      successThreshold: 1
      timeoutSeconds: 1
    name: falco-talon
    ports:
    - containerPort: 2803
      name: http
      protocol: TCP
    - containerPort: 4222
      name: nats
      protocol: TCP
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /healthz
        port: http
        scheme: HTTP
      initialDelaySeconds: 10
      periodSeconds: 5
      successThreshold: 1
      timeoutSeconds: 1
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /etc/falco-talon/config.yaml
      name: config
      readOnly: true
      subPath: config.yaml
    - mountPath: /etc/falco-talon/rules.yaml
      name: rules
      readOnly: true
      subPath: rules.yaml
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-v78x4
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  nodeName: secu-lab-control-plane
  preemptionPolicy: PreemptLowerPriority
  priority: 0
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext:
    fsGroup: 1234
    runAsUser: 1234
  serviceAccount: falco-talon
  serviceAccountName: falco-talon
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  volumes:
  - configMap:
      defaultMode: 420
      name: falco-talon-rules
    name: rules
  - name: config
    secret:
      defaultMode: 420
      secretName: falco-talon-config
  - name: kube-api-access-v78x4
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2026-11-09T06:08:42Z"
    observedGeneration: 1
    status: "True"
    type: PodReadyToStartContainers
  - lastProbeTime: null
    lastTransitionTime: "2026-11-09T06:08:42Z"
    observedGeneration: 1
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2026-11-09T06:08:55Z"
    observedGeneration: 1
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2026-11-09T06:08:55Z"
    observedGeneration: 1
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2026-11-09T06:08:42Z"
    observedGeneration: 1
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: containerd://bd5ae8fab9a063a74aa9769fd017b4d701f3e38de35c5b3c575e778e0bf9b7dc
    image: falco.docker.scarf.sh/falcosecurity/falco-talon:0.3.0
    imageID: falco.docker.scarf.sh/falcosecurity/falco-talon@sha256:333224a111a0722ff3f418ffe6bc5d8a3be0941f37c67520bc845e62f1234ad3
    lastState: {}
    name: falco-talon
    ready: true
    resources: {}
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-11-09T06:08:43Z"
    user:
      linux:
        gid: 0
        supplementalGroups:
        - 0
        - 1234
        uid: 1234
    volumeMounts:
    - mountPath: /etc/falco-talon/config.yaml
      name: config
      readOnly: true
      recursiveReadOnly: Disabled
    - mountPath: /etc/falco-talon/rules.yaml
      name: rules
      readOnly: true
      recursiveReadOnly: Disabled
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-v78x4
      readOnly: true
      recursiveReadOnly: Disabled
  hostIP: 172.18.0.2
  hostIPs:
  - ip: 172.18.0.2
  observedGeneration: 1
  phase: Running
  podIP: 192.168.0.138
  podIPs:
  - ip: 192.168.0.138
  qosClass: BestEffort
  resources: {}
  startTime: "2026-11-09T06:08:42Z"