apiVersion: artifact.falcosecurity.dev/v1alpha1
kind: Config
metadata:
  name: falco-output
  namespace: falco
  annotations:
    argocd.argoproj.io/sync-wave: "1"
spec:
  priority: 50
  config:
    json_output: true
    json_include_output_property: true
    # Avoid the Falco inotify watcher in nested k3d nodes. Configuration and
    # rule changes are applied through GitOps reconciliation and pod rollout.
    watch_config_files: false