apiVersion: v1
kind: Pod
metadata:
  annotations:
    cni.projectcalico.org/containerID: 5589eb13f5712699540d5f9fc708a329f1a21da0d8cca434764839ca34436211
    cni.projectcalico.org/podIP: 192.168.0.144/32
    cni.projectcalico.org/podIPs: 192.168.0.144/32
    kubectl.kubernetes.io/restartedAt: "2026-11-09T06:12:58Z"
    rules-checksum: 1ed0ef71a475db77fcb26570e11db6420ae667c2b4ff3bded5dc0e3a4fd14284
    secret-checksum: 74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
  creationTimestamp: "2026-11-09T06:12:58Z"
  generateName: falco-talon-7488868c58-
  generation: 1
  labels:
    app.kubernetes.io/instance: falco-talon
    app.kubernetes.io/name: falco-talon
    pod-template-hash: 7488868c58
  name: falco-talon-7488868c58-wm5l2
  namespace: falco
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: ReplicaSet
    name: falco-talon-7488868c58
    uid: 20132c22-16d1-4e94-8582-2f4315ad2ecf
  resourceVersion: "3655"
  uid: 46fa3023-46b2-405f-abf7-3b8bc57ff36f
spec:
  containers:
  - args:
    - server
    - -c
    - /etc/falco-talon/config.yaml
    - -r
    - /etc/falco-talon/rules.yaml
    env:
    - name: LOG_LEVEL
      value: info
    - name: LOG_FORMAT
      value: text
    image: falco.docker.scarf.sh/falcosecurity/falco-talon:0.3.0
    imagePullPolicy: Always
    livenessProbe:
      failureThreshold: 3
      httpGet:
        path: /healthz
        port: http
        scheme: HTTP
      initialDelaySeconds: 10
      periodSeconds: 5
      successThreshold: 1
      timeoutSeconds: 1
    name: falco-talon
    ports:
    - containerPort: 2803
      name: http
      protocol: TCP
    - containerPort: 4222
      name: nats
      protocol: TCP
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /healthz
        port: http
        scheme: HTTP
      initialDelaySeconds: 10
      periodSeconds: 5
      successThreshold: 1
      timeoutSeconds: 1
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /etc/falco-talon/config.yaml
      name: config
      readOnly: true
      subPath: config.yaml
    - mountPath: /etc/falco-talon/rules.yaml
      name: rules
      readOnly: true
      subPath: rules.yaml
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-f7pmj
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  nodeName: secu-lab-control-plane
  preemptionPolicy: PreemptLowerPriority
  priority: 0
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext:
    fsGroup: 1234
    runAsUser: 1234
  serviceAccount: falco-talon
  serviceAccountName: falco-talon
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  volumes:
  - configMap:
      defaultMode: 420
      name: falco-talon-rules
    name: rules
  - name: config
    secret:
      defaultMode: 420
      secretName: falco-talon-config
  - name: kube-api-access-f7pmj
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2026-11-09T06:12:59Z"
    observedGeneration: 1
    status: "True"
    type: PodReadyToStartContainers
  - lastProbeTime: null
    lastTransitionTime: "2026-11-09T06:12:58Z"
    observedGeneration: 1
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2026-11-09T06:13:12Z"
    observedGeneration: 1
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2026-11-09T06:13:12Z"
    observedGeneration: 1
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2026-11-09T06:12:58Z"
    observedGeneration: 1
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: containerd://e6f7f26ef75a2064aace1a337e11556bf21e27c5d0e38a0b332e30a868da58de
    image: falco.docker.scarf.sh/falcosecurity/falco-talon:0.3.0
    imageID: falco.docker.scarf.sh/falcosecurity/falco-talon@sha256:333224a111a0722ff3f418ffe6bc5d8a3be0941f37c67520bc845e62f1234ad3
    lastState: {}
    name: falco-talon
    ready: true
    resources: {}
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-11-09T06:13:00Z"
    user:
      linux:
        gid: 0
        supplementalGroups:
        - 0
        - 1234
        uid: 1234
    volumeMounts:
    - mountPath: /etc/falco-talon/config.yaml
      name: config
      readOnly: true
      recursiveReadOnly: Disabled
    - mountPath: /etc/falco-talon/rules.yaml
      name: rules
      readOnly: true
      recursiveReadOnly: Disabled
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-f7pmj
      readOnly: true
      recursiveReadOnly: Disabled
  hostIP: 172.18.0.2
  hostIPs:
  - ip: 172.18.0.2
  observedGeneration: 1
  phase: Running
  podIP: 192.168.0.144
  podIPs:
  - ip: 192.168.0.144
  qosClass: BestEffort
  resources: {}
  startTime: "2026-11-09T06:12:58Z"