CrowdStrike / falcon-helm

Helm Charts for running CrowdStrike Falcon with Kubernetes
https://artifacthub.io/packages/helm/falcon-helm/falcon-sensor
Apache License 2.0
74 stars 71 forks source link

Kubernetes Protection Agent (KPA) version 1.x do not exists on the CS registry #290

Open coolhome opened 5 months ago

coolhome commented 5 months ago

The latest chart is using image version 1.0.1 but that is not in the registry.

 ./falcon-container-sensor-pull.sh -u $FALCON_CLIENT_ID -s $FALCON_CLIENT_SECRET -t kpagent --list-tags --runtime podman
{
  "name": "kpagent",
  "repository": "registry.crowdstrike.com/kubernetes_protection/kpagent",
  "tags": [
    "0.43.24",
    "0.69.3",
    "0.248.0",
    "0.447.0",
    "0.457.0",
    "0.585.0",
    "0.852.0",
    "0.917.0",
    "0.1473.0",
    "0.1647.0",
    "0.1854.0",
    "0.2079.0"
  ]
}

In addition, the documentation in support and this repository are missing the client scope Kubernetes Protection Read and Write when using the CrowdStrike registry. The only place this seems to be correct is here terraform-kubectl-falcon

wy100101 commented 1 day ago

Did you ever get an answer of this? Looks like it still has the wrong behavior.