github/deprecated-helm-charts
1
0
Fork 0
mirror of https://github.com/helm/charts.git synced 2026-08-23 22:37:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

[stable/falco] cri-o and containerd support for falco 0.15.0 (#13744)

Browse Source 
* [stable/falco] make the container runtime socket configurable

Co-authored-by: Leonardo Di Donato <leodidonato@gmail.com>
Signed-off-by: Lorenzo Fontana <lo@linux.com>

* [stable/falco]: update to falco 0.15.0 with cri-o and containerd support

Signed-off-by: Lorenzo Fontana <lo@linux.com>

Co-Authored-By: Leonardo Di Donato <leodidonato@gmail.com>
Signed-off-by: Lorenzo Fontana <lo@linux.com>

* [stable/falco]: update changelog

Signed-off-by: Lorenzo Fontana <lo@linux.com>

Co-Authored-By: Leonardo Di Donato <leodidonato@gmail.com>

* [stable/falco]: bump chart release to 0.7.6

Signed-off-by: Lorenzo Fontana <lo@linux.com>

Co-Authored-By: Leonardo Di Donato <leodidonato@gmail.com>
This commit is contained in:
Lorenzo Fontana
2019-05-14 06:21:14 -07:00
committed by Kubernetes Prow Robot
co-authored by Leonardo Di Donato
parent 4826f74dbf
commit faa1a4daee
5 changed files with 38 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stable/falco/CHANGELOG.md
+9
View File
@@ -3,6 +3,15 @@
This file documents all notable changes to Sysdig Falco Helm Chart. The release
numbering uses [semantic versioning](http://semver.org).
## v0.7.6
### Major Changes
* Allow to enable/disable usage of the docker socket
* Configurable docker socket path
* CRI support, configurable CRI socket
* Allow to enable/disable usage of the CRI socket
## v0.7.5
### Minor Changes
stable/falco/Chart.yaml
+1 -1
View File
@@ -1,6 +1,6 @@
apiVersion: v1
name: falco
version: 0.7.5
version: 0.7.6
appVersion: 0.15.0
description: Sysdig Falco
keywords:
stable/falco/README.md
+2
View File
@@ -49,6 +49,8 @@ The following table lists the configurable parameters of the Falco chart and the
| `image.repository` | The image repository to pull from | `falcosecurity/falco` |
| `image.tag` | The image tag to pull | `0.15.0` |
| `image.pullPolicy` | The image pull policy | `IfNotPresent` |
| `cri.socket` | The path of the CRI socket | `/run/containerd/containerd.sock` |
| `docker.socket` | The path of the Docker daemon socket | `/var/run/docker.sock` |
| `resources.requests.cpu` | CPU requested for being run in a node | `100m` |
| `resources.requests.memory` | Memory requested for being run in a node | `512Mi` |
| `resources.limits.cpu` | CPU limit | `200m` |
stable/falco/templates/daemonset.yaml
+18 -1
View File
@@ -32,6 +32,10 @@ spec:
privileged: true
args:
- /usr/bin/falco
{{- if (and .Values.cri.enabled .Values.cri.socket) }}
- --cri
- /host/var/run/cri.sock
{{- end }}
- -K
- /var/run/secrets/kubernetes.io/serviceaccount/token
- -k
@@ -58,8 +62,14 @@ spec:
value: {{ .Values.proxy.noProxy }}
{{- end }}
volumeMounts:
{{- if (and .Values.docker.enabled .Values.docker.socket) }}
- mountPath: /host/var/run/docker.sock
name: docker-socket
{{- end}}
{{- if (and .Values.cri.enabled .Values.cri.socket) }}
- mountPath: /host/var/run/cri.sock
name: cri-socket
{{- end}}
- mountPath: /host/dev
name: dev-fs
- mountPath: /host/proc
@@ -160,9 +170,16 @@ spec:
- name: dshm
emptyDir:
medium: Memory
{{- if (and .Values.docker.enabled .Values.docker.socket) }}
- name: docker-socket
hostPath:
path: /var/run/docker.sock
path: {{ .Values.docker.socket }}
{{- end}}
{{- if (and .Values.cri.enabled .Values.cri.socket) }}
- name: cri-socket
hostPath:
path: {{ .Values.cri.socket }}
{{- end}}
- name: dev-fs
hostPath:
path: /dev
stable/falco/values.yaml
+8
View File
@@ -6,6 +6,14 @@ image:
tag: 0.15.0
pullPolicy: IfNotPresent
docker:
enabled: true
socket: /var/run/docker.sock
cri:
enabled: true
socket: /run/containerd/containerd.sock
resources:
# Although resources needed are subjective on the actual workload we provide
# a sane defaults ones. If you have more questions or concerns, please refer