Pulumi Falco Openstack Example

This example demonstrates how to deploy nodes to try Falco on an Openstack host using Pulumi.

Note: By default, the values in the Pulumi.yaml use Infomaniak Openstack. You can change the values in the Pulumi.yaml file to match your Openstack configuration.

Running this project

Login to your openstack account (horizon) and source the openstack rc file:

source openstack.rc

Create a new project using this template:

pulumi new https://github.com/CuistOps/falco/tree/main

Run the pulumi program:

pulumi up

Connect to hosts

You can connect to the nodes using the private key generated by the Pulumi program. Unlike the public key in the Pulumi.yaml file, the private key is only used to let the admin node connect to the other nodes.

Export the private key that can be used to connect to the nodes:

pulumi stack output nodes_keypair --show-secrets > nodes_keypair.pem

Send it to the admin node:

scp nodes_keypair.pem debian@$(pulumi stack output admin_external_ip):.ssh/id_rsa
ssh debian@$(pulumi stack output admin_external_ip) chmod 600 .ssh/id_rsa

⚠️ Note that you have to set the pulumi config passphrase to access content of the private key.

Destroy the resources

To destroy the resources created by the Pulumi program, run the following command:

pulumi destroy