apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    deployment.kubernetes.io/revision: "6"
    meta.helm.sh/release-name: falco-talon
    meta.helm.sh/release-namespace: falco
  creationTimestamp: "2026-11-09T06:02:55Z"
  generation: 6
  labels:
    app.kubernetes.io/instance: falco-talon
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: falco-talon
    app.kubernetes.io/part-of: falco-talon
    app.kubernetes.io/version: 0.3.0
    helm.sh/chart: falco-talon-0.4.2
  name: falco-talon
  namespace: falco
  resourceVersion: "3308"
  uid: fca28140-2784-4b4a-9b54-e78c06c2ae78
spec:
  progressDeadlineSeconds: 600
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/instance: falco-talon
      app.kubernetes.io/name: falco-talon
  strategy:
    rollingUpdate:
      maxSurge: 25%
      maxUnavailable: 25%
    type: RollingUpdate
  template:
    metadata:
      annotations:
        kubectl.kubernetes.io/restartedAt: "2026-11-09T06:10:46Z"
        rules-checksum: 99b1f06e32aafa0e293b8f11fa70b3172eca27e6259818d28bc7526e118881e2
        secret-checksum: 74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
      labels:
        app.kubernetes.io/instance: falco-talon
        app.kubernetes.io/name: falco-talon
    spec:
      containers:
      - args:
        - server
        - -c
        - /etc/falco-talon/config.yaml
        - -r
        - /etc/falco-talon/rules.yaml
        env:
        - name: LOG_LEVEL
          value: info
        - name: LOG_FORMAT
          value: text
        image: falco.docker.scarf.sh/falcosecurity/falco-talon:0.3.0
        imagePullPolicy: Always
        livenessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: http
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 5
          successThreshold: 1
          timeoutSeconds: 1
        name: falco-talon
        ports:
        - containerPort: 2803
          name: http
          protocol: TCP
        - containerPort: 4222
          name: nats
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: http
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 5
          successThreshold: 1
          timeoutSeconds: 1
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /etc/falco-talon/config.yaml
          name: config
          readOnly: true
          subPath: config.yaml
        - mountPath: /etc/falco-talon/rules.yaml
          name: rules
          readOnly: true
          subPath: rules.yaml
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext:
        fsGroup: 1234
        runAsUser: 1234
      serviceAccount: falco-talon
      serviceAccountName: falco-talon
      terminationGracePeriodSeconds: 30
      volumes:
      - configMap:
          defaultMode: 420
          name: falco-talon-rules
        name: rules
      - name: config
        secret:
          defaultMode: 420
          secretName: falco-talon-config
status:
  availableReplicas: 1
  conditions:
  - lastTransitionTime: "2026-11-09T06:03:10Z"
    lastUpdateTime: "2026-11-09T06:03:10Z"
    message: Deployment has minimum availability.
    reason: MinimumReplicasAvailable
    status: "True"
    type: Available
  - lastTransitionTime: "2026-11-09T06:02:55Z"
    lastUpdateTime: "2026-11-09T06:11:02Z"
    message: ReplicaSet "falco-talon-5b66ff6f59" has successfully progressed.
    reason: NewReplicaSetAvailable
    status: "True"
    type: Progressing
  observedGeneration: 6
  readyReplicas: 1
  replicas: 1
  terminatingReplicas: 1
  updatedReplicas: 1