refactor(falco): switch k8s audit webhook to be exposed via ClusterIP

Prior use of NodePort (and no authentication on webhook) meant that users could send spoof requests to create audit log events for events that didn't happen.

Switching to use internal networking as cleaner than managing / generating unique credentials for clusters.

Closes kubernetes/magnum#66 (closed)

Edited by Jack Charlie Munday

Merge request reports

Loading