new(userspace/falco): add --disable-cri-async flag

[fntlnz]

Signed-off-by: Lorenzo Fontana lo@linux.com

What type of PR is this?

/kind feature

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #925

Special notes for your reviewer:

Does this PR introduce a user-facing change?:

new: flag to disable asynchronous container metadata (CRI) fetch `--disable-cri-async`

[fntlnz]

/milestone 0.22.0

[leodido]

/honk

[poiana]

@leodido:

In response to this:

/honk

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[leodido]

/hold

hold this until 0.21.0 is cut

[krisnova]

/honk
/approve
/lgtm

[poiana]

@kris-nova:

In response to this:

/honk
/approve
/lgtm

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[poiana]

LGTM label has been added.

Git tree hash: 169e6e276b6efc0f12af311cc8df6c350ca84c09

[fntlnz]

/hold cancel

[fntlnz]

Artifacts to try this can be found here in the meanwhile this gets merged:

https://854-49986046-gh.circle-artifacts.com/0/packages/falco-0.20.0-60%2Bdd20275-x86_64.deb
https://854-49986046-gh.circle-artifacts.com/0/packages/falco-0.20.0-60%2Bdd20275-x86_64.rpm
https://854-49986046-gh.circle-artifacts.com/0/packages/falco-0.20.0-60%2Bdd20275-x86_64.tar.gz

[poiana]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: kris-nova, leodido

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [kris-nova,leodido]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[nebi-frame]

Is there any changes on how we are going to build binary and deploy?

[leodido]

Hey @nebi-frame you can grab the packages from:

• https://bintray.com/falcosecurity/deb-dev
• https://bintray.com/falcosecurity/rpm-dev
• https://bintray.com/falcosecurity/bin-dev

[JScrivanich]

Hey, so after testing this, we are able to confirm that for ECS isntances, this fix has been resolved. However, on our EKS instances, the issue continues to persist. Could you please help us identify why that might be? I confirmed that we installed the latest falco and that it is running with this new flag. Thanks!