Merge pull request #1917 from macaktom/remove-falco

Falco removal Build passing on a branch. Merging contributor PR.
cnti-testcatalog · Mar 5, 2024 · a1797d3 · a1797d3
2 parents 6d09d1b + 9be8568
commit a1797d3
Show file tree

Hide file tree

Showing 48 changed files with 34 additions and 219 deletions.
diff --git a/.github/workflows/actions.yml b/.github/workflows/actions.yml
@@ -147,7 +147,6 @@ jobs:
         echo "RUNNER: $RUNNER_NAME"
     - name: Run Crystal Spec
       env:
-        FALCO_ENV: CI
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         DOCKERHUB_USERNAMES: ${{ secrets.DOCKERHUB_USERNAMES }}
         DOCKERHUB_PASSWORDS: ${{ secrets.DOCKERHUB_PASSWORDS }}
@@ -398,7 +397,6 @@ jobs:
         ./cnf-testsuite setup
         wget -O cnf-testsuite.yml https://raw.githubusercontent.com/cnti-testcatalog/testsuite/main/example-cnfs/coredns/cnf-testsuite.yml
         ./cnf-testsuite cnf_setup cnf-config=./cnf-testsuite.yml
-        export FALCO_ENV="CI"
         LOG_LEVEL=info ./cnf-testsuite all ~compatibility ~resilience ~reasonable_startup_time ~reasonable_image_size ~platform ~volume_hostpath_not_found ~privileged ~increase_capacity ~decrease_capacity ~install_script_helm ~helm_chart_valid ~helm_chart_published verbose
     - name: Delete Cluster
       if: ${{ always() }}
@@ -473,7 +471,6 @@ jobs:
         ./cnf-testsuite setup
         wget -O cnf-testsuite.yml https://raw.githubusercontent.com/cnti-testcatalog/testsuite/main/example-cnfs/coredns/cnf-testsuite.yml
         ./cnf-testsuite cnf_setup cnf-config=./cnf-testsuite.yml
-        export FALCO_ENV="CI"
         LOG_LEVEL=info ./cnf-testsuite all ~resilience ~compatibility ~pod_network_latency ~platform ~volume_hostpath_not_found ~privileged ~increase_capacity ~decrease_capacity ~ip_addresses ~liveness ~readiness ~rolling_update ~rolling_downgrade ~rolling_version_change ~nodeport_not_used ~hostport_not_used ~hardcoded_ip_addresses_in_k8s_runtime_configuration ~install_script_helm ~helm_chart_valid ~helm_chart_published ~rollback ~secrets_used ~immutable_configmap verbose
     - name: Delete Cluster
       if: ${{ always() }}
@@ -548,7 +545,6 @@ jobs:
         ./cnf-testsuite setup
         wget -O cnf-testsuite.yml https://raw.githubusercontent.com/cnti-testcatalog/testsuite/main/example-cnfs/coredns/cnf-testsuite.yml
         ./cnf-testsuite cnf_setup cnf-config=./cnf-testsuite.yml
-        export FALCO_ENV="CI"
         LOG_LEVEL=info ./cnf-testsuite all ~resilience ~platform ~ip_addresses ~liveness ~readiness ~rolling_update ~rolling_downgrade ~rolling_version_change ~nodeport_not_used ~hostport_not_used ~hardcoded_ip_addresses_in_k8s_runtime_configuration ~rollback ~secrets_used ~immutable_configmap ~reasonable_startup_time ~reasonable_image_size verbose
     - name: Delete Cluster
       if: ${{ always() }}

diff --git a/.gitignore b/.gitignore
@@ -51,7 +51,6 @@ airgapped.tar.gz
 airgaptest.tar.gz
 /cnf-testsuite.yml
 /*.tgz
-falco_rule.yaml
 /enforce-image-tag.yml
 /constraint_template.yml
 /install.sh

diff --git a/TEST-CATEGORIES.md b/TEST-CATEGORIES.md
@@ -76,7 +76,7 @@ The CNTI Test Catalog validates interoperability of CNF **workloads** supplied b
 
 ## Security Tests
 
-#### CNF containers should be isolated from one another and the host. The CNTI Test Catalog uses tools like [OPA Gatekeeper](https://github.com/open-policy-agent/gatekeeper), [Falco](https://github.com/falcosecurity/falco), and [Armosec Kubescape](https://github.com/armosec/kubescape):
+#### CNF containers should be isolated from one another and the host. The CNTI Test Catalog uses tools like [OPA Gatekeeper](https://github.com/open-policy-agent/gatekeeper) and [Armosec Kubescape](https://github.com/armosec/kubescape):
 
 #### On workloads:
 
@@ -111,7 +111,7 @@ The CNTI Test Catalog validates interoperability of CNF **workloads** supplied b
 - Testing if the CNF is installed using a [versioned](https://helm.sh/docs/topics/chart_best_practices/dependencies/#versions) Helm v3 chart
 - Searching for hardcoded IP addresses, subnets, or node ports in the configuration
 - Checking if the pod/container can be started without mounting a volume (e.g. using [helm configuration](https://kubernetes.io/docs/tasks/configure-pod-container/configure-volume-storage/)) that has configuration files
-- Testing by reseting any child processes, and when the parent process is started, checking to see if those child processes are reaped (ie. monitoring processes with [Falco](https://github.com/falcosecurity/falco) or [sysdig-inspect](https://github.com/draios/sysdig-inspect))
+- Testing by reseting any child processes, and when the parent process is started, checking to see if those child processes are reaped (ie. monitoring processes with [sysdig-inspect](https://github.com/draios/sysdig-inspect))
 - Testing if there are any (non-declarative) hardcoded IP addresses or subnet masks
 - Tests if nodeport is not used.
 - Tests hostport is not used.

diff --git a/USAGE.md b/USAGE.md
@@ -941,8 +941,6 @@ If your application does not need root privileges, make sure to define the runAs
 
 </b>
 
-> To configure the Falco driver to be used for this test, please refer to [docs/falco-config.md](docs/falco-config.md).
-
 ## [Host PID/IPC privileges](docs/LIST_OF_TESTS.md#host-pidipc-privileges)
 
 ##### To run the Host PID/IPC test, you can use the following command:

diff --git a/docs/falco-config.md b/docs/falco-config.md
diff --git a/embedded_files/falco_rule.yaml b/embedded_files/falco_rule.yaml
diff --git a/example-cnfs/envoy/cnf-testsuite.yml b/example-cnfs/envoy/cnf-testsuite.yml
@@ -5,4 +5,4 @@ helm_repository:
   name: stable 
   repo_url: https://cncf.gitlab.io/stable
 helm_chart: stable/envoy
-allowlist_helm_chart_container_names: [falco, nginx, envoy, calico-node, kube-proxy, nginx-proxy, node-cache]
+allowlist_helm_chart_container_names: [nginx, envoy, calico-node, kube-proxy, nginx-proxy, node-cache]
diff --git a/example-cnfs/ip-forwarder/cnf-testsuite.yml b/example-cnfs/ip-forwarder/cnf-testsuite.yml
@@ -3,4 +3,4 @@ helm_directory: vpp
 release_name: vpp
 service_name: ""
 rolling_update_test_tag: latest
-allowlist_helm_chart_container_names: [falco, nginx, calico-node, kube-proxy, nginx-proxy, node-cache, kube-multus]
+allowlist_helm_chart_container_names: [nginx, calico-node, kube-proxy, nginx-proxy, node-cache, kube-multus]
diff --git a/example-cnfs/pantheon-nsm-nat/cnf-testsuite.yml b/example-cnfs/pantheon-nsm-nat/cnf-testsuite.yml
@@ -2,4 +2,4 @@
 helm_directory: nat-cnf 
 release_name: cnf-nat 
 service_name: 
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy, kube-multus]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy, kube-multus]
diff --git a/example-cnfs/vpp-3c2n-csp-use-case/cnf-testsuite.yml b/example-cnfs/vpp-3c2n-csp-use-case/cnf-testsuite.yml
@@ -1,4 +1,4 @@
 ---
 helm_directory: csp
 release_name: ip-forwarder-csp
-allowlist_helm_chart_container_names: [falco, nginx, calico-node, kube-proxy, nginx-proxy, node-cache]
+allowlist_helm_chart_container_names: [nginx, calico-node, kube-proxy, nginx-proxy, node-cache]
diff --git a/sample-cnfs/k8s-multiple-deployments/cnf-testsuite.yml b/sample-cnfs/k8s-multiple-deployments/cnf-testsuite.yml
@@ -6,4 +6,4 @@ service_name:
 helm_repository:
   name: stable 
   repo_url: https://cncf.gitlab.io/stable
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/k8s-multiple-processes/cnf-testsuite.yml b/sample-cnfs/k8s-multiple-processes/cnf-testsuite.yml
@@ -6,4 +6,4 @@ helm_repository:
   name: stable 
   repo_url: https://cncf.gitlab.io/stable
 rolling_update_test_tag: 1.6.7
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/k8s-non-helm-no-image-policy/cnf-testsuite.yml b/sample-cnfs/k8s-non-helm-no-image-policy/cnf-testsuite.yml
@@ -4,4 +4,4 @@ release_name: nginx-webapp
 helm_repository:
   name:
   repo_url:
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/k8s-non-helm/cnf-testsuite.yml b/sample-cnfs/k8s-non-helm/cnf-testsuite.yml
@@ -4,4 +4,4 @@ release_name: nginx-webapp
 helm_repository:
   name:
   repo_url:
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/k8s-sidecar-container-pattern/cnf-testsuite.yml b/sample-cnfs/k8s-sidecar-container-pattern/cnf-testsuite.yml
@@ -9,4 +9,4 @@ helm_repository:
   name: stable 
   repo_url: https://cncf.gitlab.io/stable
 rolling_update_test_tag: 1.6.7
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/ndn-reasonable-image-size/cnf-testsuite.yml b/sample-cnfs/ndn-reasonable-image-size/cnf-testsuite.yml
@@ -3,4 +3,4 @@ helm_directory: chart
 helm_install_namespace: "envoy-test"
 release_name: envoy 
 service_name: envoy
-allowlist_helm_chart_container_names: [falco, nginx, envoy, calico-node, kube-proxy, nginx-proxy, node-cache]
+allowlist_helm_chart_container_names: [nginx, envoy, calico-node, kube-proxy, nginx-proxy, node-cache]
diff --git a/sample-cnfs/sample-bad-helm-deploy-repo/cnf-testsuite.yml b/sample-cnfs/sample-bad-helm-deploy-repo/cnf-testsuite.yml
@@ -5,4 +5,4 @@ service_name: coredns-coredns
 helm_repository:
   name: stable
   repo_url: https://bad-helm-repo.googleapis.com
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-bad-helm-repo/cnf-testsuite.yml b/sample-cnfs/sample-bad-helm-repo/cnf-testsuite.yml
@@ -5,4 +5,4 @@ helm_repository:
   name: badrepo
   repo_url: https://bad-helm-repo.googleapis.com
 helm_chart: badrepo/coredns
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-bad-zombie/cnf-testsuite.yml b/sample-cnfs/sample-bad-zombie/cnf-testsuite.yml
@@ -6,4 +6,4 @@ helm_repository:
   repo_url: https://cncf.gitlab.io/stable
 helm_chart: stable/coredns
 helm_install_namespace: cnfspace
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-bad_helm_coredns-cnf/cnf-testsuite.yml b/sample-cnfs/sample-bad_helm_coredns-cnf/cnf-testsuite.yml
@@ -2,4 +2,4 @@
 helm_directory: chart
 release_name: bad-helm-coredns-coredns
 service_name: bad-helm-coredns-coredns
-allowlist_helm_chart_container_names: [falco, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-coredns-cnf-bad-chart/cnf-testsuite.yml b/sample-cnfs/sample-coredns-cnf-bad-chart/cnf-testsuite.yml
@@ -5,4 +5,4 @@ helm_repository:
   name: stable 
   repo_url: https://cncf.gitlab.io/stable
 helm_chart: stable/corsdsdsdedns
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-coredns-cnf-source/cnf-testsuite.yml b/sample-cnfs/sample-coredns-cnf-source/cnf-testsuite.yml
@@ -2,4 +2,4 @@
 release_name: coredns
 service_name: coredns-coredns 
 helm_chart: stable/coredns
-allowlist_helm_chart_container_names: [falco, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-coredns-cnf/cnf-testsuite.yml b/sample-cnfs/sample-coredns-cnf/cnf-testsuite.yml
@@ -6,4 +6,4 @@ helm_repository:
   repo_url: https://cncf.gitlab.io/stable
 helm_chart: stable/coredns
 helm_install_namespace: cnfspace
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-coredns-cnf2/cnf-testsuite.yml b/sample-cnfs/sample-coredns-cnf2/cnf-testsuite.yml
@@ -6,4 +6,4 @@ helm_repository:
   repo_url: https://cncf.gitlab.io/stable
 helm_chart: stable/coredns
 helm_install_namespace: cnfspace2
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-coredns-cnf3/cnf-testsuite.yml b/sample-cnfs/sample-coredns-cnf3/cnf-testsuite.yml
@@ -6,4 +6,4 @@ helm_repository:
   repo_url: https://cncf.gitlab.io/stable
 helm_chart: stable/coredns
 helm_install_namespace: cnfspace3
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-coredns-cnf4/cnf-testsuite.yml b/sample-cnfs/sample-coredns-cnf4/cnf-testsuite.yml
@@ -6,4 +6,4 @@ helm_repository:
   repo_url: https://cncf.gitlab.io/stable
 helm_chart: stable/coredns
 helm_install_namespace: cnfspace4
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-generic-cnf/cnf-testsuite.yml b/sample-cnfs/sample-generic-cnf/cnf-testsuite.yml
@@ -6,7 +6,6 @@ helm_repository:
   repo_url: https://cncf.gitlab.io/stable
 helm_chart: stable/coredns
 allowlist_helm_chart_container_names:
-- falco
 - nginx
 - coredns
 - calico-node

diff --git a/sample-cnfs/sample-large-cnf/cnf-testsuite.yml b/sample-cnfs/sample-large-cnf/cnf-testsuite.yml
@@ -5,4 +5,4 @@ service_name: coredns-coredns
 helm_repository:
   name: stable 
   repo_url: https://cncf.gitlab.io/stable
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-multiple-processes/cnf-testsuite.yml b/sample-cnfs/sample-multiple-processes/cnf-testsuite.yml
@@ -4,4 +4,4 @@ release_name: multi-proc
 helm_repository:
   name:
   repo_url:
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-openmetrics/cnf-testsuite.yml b/sample-cnfs/sample-openmetrics/cnf-testsuite.yml
@@ -4,4 +4,4 @@ release_name: openmetrics-compliant
 helm_repository:
   name:
   repo_url:
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample-statefulset-cnf/cnf-testsuite.yml b/sample-cnfs/sample-statefulset-cnf/cnf-testsuite.yml
@@ -6,7 +6,7 @@ helm_repository:
   name: bitnami 
   repo_url: https://charts.bitnami.com/bitnami 
 helm_chart: bitnami/wordpress 
-allowlist_helm_chart_container_names: [falco, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [nginx, coredns, calico-node, kube-proxy, nginx-proxy]
 
 # The below configuration for the rolling tests
 # refer to container image versions that are

diff --git a/sample-cnfs/sample_bad_signal_handling/cnf-testsuite.yml b/sample-cnfs/sample_bad_signal_handling/cnf-testsuite.yml
@@ -2,4 +2,4 @@
 helm_directory: chart
 release_name: envoy 
 service_name: envoy
-allowlist_helm_chart_container_names: [falco, nginx, envoy, calico-node, kube-proxy, nginx-proxy, node-cache]
+allowlist_helm_chart_container_names: [nginx, envoy, calico-node, kube-proxy, nginx-proxy, node-cache]
diff --git a/sample-cnfs/sample_envoy_slow_startup/cnf-testsuite.yml b/sample-cnfs/sample_envoy_slow_startup/cnf-testsuite.yml
@@ -2,4 +2,4 @@
 helm_directory: chart
 release_name: envoy 
 service_name: envoy
-allowlist_helm_chart_container_names: [falco, nginx, envoy, calico-node, kube-proxy, nginx-proxy, node-cache]
+allowlist_helm_chart_container_names: [nginx, envoy, calico-node, kube-proxy, nginx-proxy, node-cache]
diff --git a/sample-cnfs/sample_good_signal_handling/cnf-testsuite.yml b/sample-cnfs/sample_good_signal_handling/cnf-testsuite.yml
@@ -2,4 +2,4 @@
 helm_directory: chart
 release_name: envoy 
 service_name: envoy
-allowlist_helm_chart_container_names: [falco, nginx, envoy, calico-node, kube-proxy, nginx-proxy, node-cache]
+allowlist_helm_chart_container_names: [nginx, envoy, calico-node, kube-proxy, nginx-proxy, node-cache]
diff --git a/sample-cnfs/sample_good_signal_handling_tini/cnf-testsuite.yml b/sample-cnfs/sample_good_signal_handling_tini/cnf-testsuite.yml
@@ -7,4 +7,4 @@ helm_repository:
 helm_chart: jenkins/jenkins
 helm_install_namespace: cnfspace
 helm_values: "--set controller.sidecars.configAutoReload.enabled=false"
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
diff --git a/sample-cnfs/sample_good_zombie_handling/cnf-testsuite.yml b/sample-cnfs/sample_good_zombie_handling/cnf-testsuite.yml
@@ -2,4 +2,4 @@
 helm_directory: chart
 release_name: envoy 
 service_name: envoy
-allowlist_helm_chart_container_names: [falco, nginx, envoy, calico-node, kube-proxy, nginx-proxy, node-cache]
+allowlist_helm_chart_container_names: [nginx, envoy, calico-node, kube-proxy, nginx-proxy, node-cache]
diff --git a/spec/fixtures/cnf-testsuite-not-exclusive.yml b/spec/fixtures/cnf-testsuite-not-exclusive.yml
@@ -6,7 +6,6 @@ helm_repository:
   name: stable
   repo_url: https://cncf.gitlab.io/stable
 allowlist_helm_chart_container_names:
-- falco
 - node-cache
 - nginx
 - coredns

diff --git a/spec/fixtures/cnf-testsuite-unmapped-keys-and-subkeys.yml b/spec/fixtures/cnf-testsuite-unmapped-keys-and-subkeys.yml
@@ -6,5 +6,5 @@ helm_repository:
   repo_url: https://cncf.gitlab.io/stable
   test_on_helm_repo:
 helm_chart: stable/coredns
-allowlist_helm_chart_container_names: [falco, node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
+allowlist_helm_chart_container_names: [node-cache, nginx, coredns, calico-node, kube-proxy, nginx-proxy]
 test_at_root:
diff --git a/spec/fixtures/cnf-testsuite.yml b/spec/fixtures/cnf-testsuite.yml
@@ -5,7 +5,6 @@ helm_repository:
   repo_url: https://cncf.gitlab.io/stable
 helm_chart: stable/coredns
 allowlist_helm_chart_container_names:
-- falco
 - node-cache
 - nginx
 - coredns

diff --git a/src/tasks/cert/cert_security.cr b/src/tasks/cert/cert_security.cr
@@ -5,7 +5,7 @@ require "colorize"
 require "totem"
 require "../utils/utils.cr"
 
-desc "CNF containers should be isolated from one another and the host.  The CNF Test suite uses tools like Falco, Sysdig Inspect and gVisor"
+desc "CNF containers should be isolated from one another and the host.  The CNF Test suite uses tools like Sysdig Inspect and gVisor"
 task "cert_security", [
    "cert_security_title", 
     "symlink_file_system",

diff --git a/src/tasks/cleanup.cr b/src/tasks/cleanup.cr
@@ -51,7 +51,6 @@ task "tools_cleanup", [
     "uninstall_kubescape",
     "uninstall_cluster_tools",
     "uninstall_opa",
-    "uninstall_falco",
 
     # Helm needs to be uninstalled last to allow other uninstalls to use helm if necessary.
     # Check this issue for details - https://github.com/cncf/cnf-testsuite/issues/1586

diff --git a/src/tasks/constants.cr b/src/tasks/constants.cr
@@ -26,7 +26,6 @@ TESTSUITE_NAMESPACE = "cnf-testsuite"
 
 #Embedded global text variables
 EmbeddedFileManager.node_failure_values
-EmbeddedFileManager.falco_rules
 EmbeddedFileManager.reboot_daemon
 EmbeddedFileManager.chaos_network_loss
 EmbeddedFileManager.chaos_cpu_hog