Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GCP Bucket output does not write anything to bucket #809

Closed
mattdecorniquet opened this issue Mar 6, 2024 · 2 comments
Closed

GCP Bucket output does not write anything to bucket #809

mattdecorniquet opened this issue Mar 6, 2024 · 2 comments
Assignees
Labels
kind/bug Something isn't working
Milestone

Comments

@mattdecorniquet
Copy link

Describe the bug

I'm experiencing exactly the same issue described in #313 (which was fixed in #312):
I've configured credentials for a bucket in the GCS output section, the k8s cluster is generating logs and sending them to falco and then to falcosidekick.
The latter has the following in its logs GCPStorage - Upload to bucket OK, debug mode show the proper payload but nothing is created on the bucket.
Trying to output those same logs with a default loki config works flawlessly.

How to reproduce it

  • Configure the GCP Bucket output in sidekick.
  • Generate a debug event.
  • Observe GCPStorage - Upload to bucket OK
  • Observe no new objects or API calls in the target GCP bucket

Expected behaviour

Logs should be written in the target GCP bucket when falcosidekick says it uploaded successfully.

Screenshots
image

Environment

GKE, 9 nodes on Google container-OS. Falco and falcosidekick both installed with official helm chart with sidekick.enabled=true.
We're using argocd to manage helm.

  • Falco version:
    helm chart is falco-4.2.2 so falco is 0.37.1 and falcosidekick is 2.28.0

Additional context

@mattdecorniquet mattdecorniquet added the kind/bug Something isn't working label Mar 6, 2024
@Issif
Copy link
Member

Issif commented Mar 6, 2024

Thanks for this report. I didn't implement the GCS output myself, I'll try to find some help.

@Issif Issif added this to the 2.29.0 milestone Mar 25, 2024
@Issif Issif self-assigned this Apr 30, 2024
@Issif
Copy link
Member

Issif commented Jun 24, 2024

This issue should be fixed in the upcoming 2.29

@Issif Issif closed this as completed Jun 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Something isn't working
Projects
Status: Done
Development

No branches or pull requests

2 participants