Skip to content

Instantly share code, notes, and snippets.

Notice A shell was spawned in a container with an attached terminal | evt_type=execve user=root user_uid=0 user_loginuid=-1 process=sh proc_exepath=/bin/busybox parent=containerd-shim command=sh terminal=34816 exe_flags=EXE_WRITABLE|EXE_LOWER_LAYER container_id=051dac4f93a2 container_name=<NA> container_image_repository=<NA> container_image_tag=<NA> k8s_pod_name=<NA> k8s_ns_name=<NA>
kubectl logs -n falco -l app.kubernetes.io/name=falco -f
kubectl apply -f test-pod.yaml
kubectl exec -it test-pod -- sh
% kubectl rollout status daemonset falco -n falco
daemon set "falco" successfully rolled out
% kubectl get pods -n falco
NAME READY STATUS RESTARTS AGE
falco-jxmvz 2/2 Running 0 31s
falco-x8b4l 2/2 Running 0 31s
tty: true
driver:
kind: modern_ebpf
% helm repo add falcosecurity https://falcosecurity.github.io/charts
"falcosecurity" already exists with the same configuration, skipping
% helm install falco falcosecurity/falco \
--namespace falco \
--create-namespace \
-f falco-values.yaml
NAME: falco
LAST DEPLOYED: Sun May 24 00:20:28 2026
NAMESPACE: falco
% kind create cluster --config kind-falco.yaml --name falco-demo
Creating cluster "falco-demo" ...
✓ Ensuring node image (kindest/node:v1.32.2) 🖼
✓ Preparing nodes 📦 📦
✓ Writing configuration 📜
✓ Starting control-plane 🕹️
✓ Installing CNI 🔌
✓ Installing StorageClass 💾
✓ Joining worker nodes 🚜
Set kubectl context to "kind-falco-demo"
import boto3
import json
agent_arn = launch_result.agent_arn
agentcore_client = boto3.client(
'bedrock-agentcore',
region_name=region
)
boto3_response = agentcore_client.invoke_agent_runtime(
agentRuntimeArn=agent_arn,
## Query 1: Current weather (general)

```python
print(
    agentcore_runtime.invoke(
        {"prompt": "How is the weather now?"}
    )
)
from strands import Agent, tool
import argparse
import json
from bedrock_agentcore.runtime import BedrockAgentCoreApp
from strands.models import BedrockModel
app = BedrockAgentCoreApp()
# Create a custom tool
@tool