From ae6bf300362c8d1a69235f045ee8bb15251fb117 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?N=C3=A9stor=20Salceda?= Date: Tue, 2 Apr 2019 18:43:20 +0200 Subject: [PATCH] [stable/falco] Disable ebpf by default (#12762) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * Disable ebpf by default This reverts the change made on 0.6.0 Signed-off-by: Néstor Salceda * Specify in CHANGELOG that we are reverting the previous change. The vast majority of our users are using the kernel module approach and we can cause some troubles with this change. Signed-off-by: Néstor Salceda * Explain WHY we activated the ebpf module by default Signed-off-by: Néstor Salceda --- stable/falco/CHANGELOG.md | 8 ++++++++ stable/falco/Chart.yaml | 2 +- stable/falco/README.md | 2 +- stable/falco/ci/ebpf-values.yaml | 2 ++ stable/falco/values.yaml | 2 +- 5 files changed, 13 insertions(+), 3 deletions(-) create mode 100644 stable/falco/ci/ebpf-values.yaml diff --git a/stable/falco/CHANGELOG.md b/stable/falco/CHANGELOG.md index fa3a156ed4..085d3e18fb 100644 --- a/stable/falco/CHANGELOG.md +++ b/stable/falco/CHANGELOG.md @@ -3,6 +3,14 @@ This file documents all notable changes to Sysdig Falco Helm Chart. The release numbering uses [semantic versioning](http://semver.org). +## v0.7.0 + +### Major Changes + +* Disable eBPF by default on Falco. We activated eBPF by default to make the + CI pass, but now we found a better method to make the CI pass without + bothering our users. + ## v0.6.0 ### Major Changes diff --git a/stable/falco/Chart.yaml b/stable/falco/Chart.yaml index 3a03d18fbe..2cb1da65ab 100644 --- a/stable/falco/Chart.yaml +++ b/stable/falco/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v1 name: falco -version: 0.6.0 +version: 0.7.0 appVersion: 0.14.0 description: Sysdig Falco keywords: diff --git a/stable/falco/README.md b/stable/falco/README.md index 94773ebfa3..b2336872d6 100644 --- a/stable/falco/README.md +++ b/stable/falco/README.md @@ -63,7 +63,7 @@ The following table lists the configurable parameters of the Falco chart and the | `proxy.httpProxy` | Set the Proxy server if is behind a firewall | `` | | `proxy.httpsProxy` | Set the Proxy server if is behind a firewall | `` | | `proxy.noProxy` | Set the Proxy server if is behind a firewall | `` | -| `ebpf.enabled` | Enable eBPF support for Falco instead of `falco-probe` kernel module | `true` | +| `ebpf.enabled` | Enable eBPF support for Falco instead of `falco-probe` kernel module | `false` | | `ebpf.settings.hostNetwork` | Needed to enable eBPF JIT at runtime for performance reasons | `true` | | `ebpf.settings.mountEtcVolume` | Needed to detect which kernel version are running in Google COS | `true` | | `falco.rulesFile` | The location of the rules files | `[/etc/falco/falco_rules.yaml, /etc/falco/falco_rules.local.yaml, /etc/falco/rules.d]` | diff --git a/stable/falco/ci/ebpf-values.yaml b/stable/falco/ci/ebpf-values.yaml new file mode 100644 index 0000000000..a3a9eafe75 --- /dev/null +++ b/stable/falco/ci/ebpf-values.yaml @@ -0,0 +1,2 @@ +ebpf: + enabled: true diff --git a/stable/falco/values.yaml b/stable/falco/values.yaml index 1df1abad6a..b334ac9e10 100644 --- a/stable/falco/values.yaml +++ b/stable/falco/values.yaml @@ -49,7 +49,7 @@ proxy: ebpf: # Enable eBPF support for Falco - enabled: true + enabled: false settings: # Needed to enable eBPF JIT at runtime for performance reasons.