-
Notifications
You must be signed in to change notification settings - Fork 165
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
refactor(userspace/libsinsp)!: deprecate gen_event class family #1659
Conversation
639e8ed
to
1be9eb6
Compare
Signed-off-by: Jason Dellaluce <[email protected]>
Signed-off-by: Jason Dellaluce <[email protected]>
…omparison values Signed-off-by: Jason Dellaluce <[email protected]>
Signed-off-by: Jason Dellaluce <[email protected]>
Signed-off-by: Jason Dellaluce <[email protected]>
Signed-off-by: Jason Dellaluce <[email protected]>
1be9eb6
to
a967fcf
Compare
/milestone 0.15.0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you for this!
/approve
LGTM label has been added. Git tree hash: b3238a3887e6e248120d314e62ecda5289f89e70
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: Andreagit97, jasondellaluce, leogr The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
What type of PR is this?
/kind cleanup
/kind design
Any specific area of the project related to this PR?
/area libsinsp
Does this PR require a change in the driver versions?
What this PR does / why we need it:
Back in the days, when we used to implement support to k8s audit logs from within Falco's core code, the libs codebase operated a refactor of the basic classes of libsinsp (i.e. event, filter, filter checks, formatter, and factories) that consisted in extracting base interfaces for all of them. Those interfaces had the
gen_event
prefix and used to be extended by both the regular libsinsp components and the Falco's C++ k8s audit detection implementation.At current times, k8s audit support has been ported to the plugin system about one year and a half ago. The purpose of these classes is now missing, and just create degrees of ambiguity and code duplication. This PR aims to do a big cleanup by going have to have one single definition for all the duplicated sinsp constructs.
Which issue(s) this PR fixes:
Special notes for your reviewer:
Does this PR introduce a user-facing change?: