[stable/falco] Disable ebpf by default (#12762)

* Disable ebpf by default

This reverts the change made on 0.6.0

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Specify in CHANGELOG that we are reverting the previous change.

The vast majority of our users are using the kernel module approach and
we can cause some troubles with this change.

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

* Explain WHY we activated the ebpf module by default

Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>

stable/falco/CHANGELOG.md

@@ -3,6 +3,14 @@
 This file documents all notable changes to Sysdig Falco Helm Chart. The release
 numbering uses [semantic versioning](http://semver.org).
 
+## v0.7.0
+
+### Major Changes
+
+* Disable eBPF by default on Falco. We activated eBPF by default to make the
+  CI pass, but now we found a better method to make the CI pass without
+  bothering our users.
+
 ## v0.6.0
 
 ### Major Changes

stable/falco/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: falco
-version: 0.6.0
+version: 0.7.0
 appVersion: 0.14.0
 description: Sysdig Falco
 keywords:

stable/falco/README.md

@@ -63,7 +63,7 @@ The following table lists the configurable parameters of the Falco chart and the
 | `proxy.httpProxy`                               | Set the Proxy server if is behind a firewall                         | ``                                                                                     |
 | `proxy.httpsProxy`                              | Set the Proxy server if is behind a firewall                         | ``                                                                                     |
 | `proxy.noProxy`                                 | Set the Proxy server if is behind a firewall                         | ``                                                                                     |
-| `ebpf.enabled`                                  | Enable eBPF support for Falco instead of `falco-probe` kernel module | `true`                                                                                 |
+| `ebpf.enabled`                                  | Enable eBPF support for Falco instead of `falco-probe` kernel module | `false`                                                                                |
 | `ebpf.settings.hostNetwork`                     | Needed to enable eBPF JIT at runtime for performance reasons         | `true`                                                                                 |
 | `ebpf.settings.mountEtcVolume`                  | Needed to detect which kernel version are running in Google COS      | `true`                                                                                 |
 | `falco.rulesFile`                               | The location of the rules files                                      | `[/etc/falco/falco_rules.yaml, /etc/falco/falco_rules.local.yaml, /etc/falco/rules.d]` |

stable/falco/ci/ebpf-values.yaml

@@ -0,0 +1,2 @@
+ebpf:
+  enabled: true

stable/falco/values.yaml

@@ -49,7 +49,7 @@ proxy:
 
 ebpf:
   # Enable eBPF support for Falco
-  enabled: true
+  enabled: false
 
   settings:
     # Needed to enable eBPF JIT at runtime for performance reasons.