falcosecurity / charts

Community managed Helm charts for running Falco with Kubernetes
Apache License 2.0
246 stars 291 forks source link

update(falco): support latest changes in falco-driver-loader #735

Closed alacuku closed 2 months ago

alacuku commented 2 months ago

The init container when the driver kind is set to auto, automatically creates a new config file for falco and sets the engine kind that fits the environment where falco is running

What type of PR is this?

Uncomment one (or more) /kind <> lines:

/kind bug

/kind cleanup

/kind design

/kind documentation

/kind failing-test

/kind feature

If this PR will release a new chart version please make sure to also uncomment the following line:

/kind chart-release

Any specific area of the project related to this PR?

Uncomment one (or more) /area <> lines:

/area falco-chart

/area falco-exporter-chart

/area falcosidekick-chart

/area event-generator-chart

/area k8s-metacollector

What this PR does / why we need it:

The init container, when driver.kind=auto, automatically generates a new Falco configuration file and selects the appropriate engine kind based on the environment where Falco is deployed.

With this commit, along with falcoctl PR #630, the Helm charts now support different driver kinds for Falco instances based on the specific node they are running on. When driver.kind=auto is set, each Falco instance dynamically selects the most suitable driver (e.g., ebpf, kmod, modern_ebpf) for the node.

+-------------------------------------------------------+
| Kubernetes Cluster                                    |
|                                                       |
|  +-------------------+  +-------------------+        |
|  | Node 1             |  | Node 2             |        |
|  |                   |  |                   |        |
|  | Falco (eBPF probe) |  | Falco (kmod)       |        |
|  +-------------------+  +-------------------+        |
|                                                       |
|                 +-------------------+                |
|                 | Node 3             |                |
|                 |                   |                |
|                 | Falco (modern eBPF)|                |
|                 +-------------------+                |
+-------------------------------------------------------+

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewer:

Checklist

alacuku commented 2 months ago

/unhold

poiana commented 2 months ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: alacuku, leogr

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/falcosecurity/charts/blob/master/OWNERS)~~ [alacuku,leogr] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
poiana commented 2 months ago

LGTM label has been added.

Git tree hash: 22a6b13cd5005c2fc814f3627d3ca3eafd1dab83