GitHub Workflow & Testing Infrastructure
Infrastructure is separated by area and cloud:
| Area | AWS | OCI |
|---|---|---|
| Terraform | Cluster | Cluster |
| Applications | Applications | Applications |
| Prow | Configuration | Configuration |
| Prow jobs | Archived jobs | Active jobs |
AWS and OCI have independent Prow versions, configuration, and node scheduling. The OCI bootstrap is managed and validated locally, outside CI.
DBG stands for Drivers Build Grid.
It's a tool that we created to prebuilt a set of Falco drivers (both kernel module and eBPF probe) for various target distro and kernel releases, by using driverkit.
You can find more about it here.
You can contribute in order to distribute prebuilt Falco drivers for new Linux kernel releases by following this guide.
Prow is a CI/CD system running on Kubernetes.
This directory contains the resources composing the Falco's workflow & testing infrastructure.
Are you looking for Deck to check the merge queue and prow jobs?
Add job definitions to the OCI catalog and include them in its Kustomization.
- Presubmits run against pull requests: DBG validation.
- Postsubmits run after changes are pushed: driver builds.
- Periodics run on a schedule: DBG updates.
Use the workload's existing service account, resource requests, node selectors and tolerations as references. The AWS job definitions are archived and are not part of the active catalog.