Skip to content

fix(plugins/k8saudit-eks): read shift as seconds - #1607

Open
gustavoortega wants to merge 1 commit into
falcosecurity:mainfrom
gustavoortega:fix/k8saudit-eks-shift-seconds
Open

gustavoortega wants to merge 1 commit into
falcosecurity:mainfrom
gustavoortega:fix/k8saudit-eks-shift-seconds

Conversation

@gustavoortega

Copy link
Copy Markdown

What type of PR is this?

/kind bug

Any specific area of the project related to this PR?

/area plugins

What this PR does / why we need it:

shift is documented in seconds, but Open passes it as a bare time.Duration, so shift: 10 is 10 ns. The test checks the first FilterLogEvents StartTime against a fake endpoint.

Which issue(s) this PR fixes:

Refs #807

The shift option is documented in seconds, but its value was passed to
the CloudWatch Logs client as a time.Duration, i.e. nanoseconds. A
configured shift of 10 started the first read 10 ns in the past instead
of 10 s.

Multiply by time.Second and cover it with a test that runs Plugin.Open
against a fake CloudWatch Logs endpoint.

Signed-off-by: Gustavo Ortega <5921963+gustavoortega@users.noreply.github.com>
@poiana

poiana commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: gustavoortega
Once this PR has been reviewed and has the lgtm label, please assign issif for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@poiana
poiana requested review from Issif and irozzo-1A November 3, 2026 19:54
@poiana

poiana commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

Welcome @gustavoortega! It looks like this is your first PR to falcosecurity/plugins 🎉

@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown

Rules files suggestions

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants