Skip to content

Commit ca19acb

Browse files
authored
Merge pull request #202 from carlosmmatos/bump-v3.2.2
Bump v3.2.2
2 parents d672c68 + 37d7578 commit ca19acb

File tree

5 files changed

+61
-37
lines changed

5 files changed

+61
-37
lines changed

README.md

Lines changed: 39 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,33 @@
11
![CrowdStrike](https://raw.githubusercontent.com/CrowdStrike/falcon-integration-gateway/main/docs/assets/cs-logo.png)
22

3-
# falcon-integration-gateway [![Python Lint](https://github.com/CrowdStrike/falcon-integration-gateway/actions/workflows/linting.yml/badge.svg)](https://github.com/CrowdStrike/falcon-integration-gateway/actions/workflows/linting.yml) [![Container Build on Quay](https://quay.io/repository/crowdstrike/falcon-integration-gateway/status "Docker Repository on Quay")](https://quay.io/repository/crowdstrike/falcon-integration-gateway)
3+
# falcon-integration-gateway [![Python Lint](https://github.com/CrowdStrike/falcon-integration-gateway/actions/workflows/linting.yml/badge.svg)](https://github.com/CrowdStrike/falcon-integration-gateway/actions/workflows/linting.yml) [![Container Build on Quay](https://quay.io/repository/crowdstrike/falcon-integration-gateway/status "Docker Repository on Quay")](https://quay.io/repository/crowdstrike/falcon-integration-gateway) ![PyPI](https://img.shields.io/pypi/v/falcon-integration-gateway)
44

55
Falcon Integration Gateway (FIG) forwards threat detection findings and audit events from the CrowdStrike Falcon platform to the [backend](fig/backends) of your choice.
66

77
Detection findings and audit events generated by CrowdStrike Falcon platform inform you about suspicious files and behaviors in your environment. You will see detections on a range of activities from the presence of a bad file (indicator of compromise (IOC)) to a nuanced collection of suspicious behaviors (indicator of attack (IOA)) occurring on one of your hosts or containers. You can learn more about the individual detections in [Falcon documentation](https://falcon.crowdstrike.com/support/documentation/40/mitre-based-falcon-detections-framework).
88

99
This project facilitates the export of the individual detections and audit events from CrowdStrike Falcon to third-party security dashboards (so called backends). The export is useful in cases where security operation team workflows are tied to given third-party solution to get early real-time heads-up about malicious activities or unusual user activities detected by CrowdStrike Falcon platform.
1010

11+
## Table of Contents
12+
13+
- [Python Compatibility](#python-compatibility)
14+
- [API Scopes](#api-scopes)
15+
- [Authentication](#authentication)
16+
- [Direct Configuration](#direct-configuration)
17+
- [Environment Variables](#environment-variables)
18+
- [Credential Store](#credential-store)
19+
- [Configuration](#configuration)
20+
- [Deployment](#deployment)
21+
- [Backends w/ Available Deployment Guide(s)](#backends-w-available-deployment-guides)
22+
- [Alternative Deployment Options](#alternative-deployment-options)
23+
- [Installation to Kubernetes using the helm chart](#installation-to-kubernetes-using-the-helm-chart)
24+
- [With Docker/Podman](#with-dockerpodman)
25+
- [From the Python Package Index (PyPI)](#from-the-python-package-index-pypi)
26+
- [From Git Repository](#from-git-repository)
27+
- [Developers Guide](#developers-guide)
28+
- [Statement of Support](#statement-of-support)
29+
30+
1131
## Python Compatibility
1232

1333
> [!IMPORTANT]
@@ -94,7 +114,9 @@ secrets_manager_client_secret_key = client_secret_key_name
94114

95115
Please refer to the [config.ini](./config/config.ini) file for more details on the available options along with their respective environment variables.
96116

97-
## Backends w/ Available Deployment Guide(s)
117+
## Deployment
118+
119+
### Backends w/ Available Deployment Guide(s)
98120

99121
| Backend | Description | Deployment Guide(s) | General Guide(s) |
100122
|:--------|:------------|:--------------------|:-------------------|
@@ -106,15 +128,15 @@ Please refer to the [config.ini](./config/config.ini) file for more details on t
106128
| Workspace ONE | Pushes events to VMware Workspace ONE Intelligence | *Coming Soon* | [Workspace ONE backend](fig/backends/workspaceone) |
107129
| Generic | Displays events to STDOUT (useful for dev/debugging) | N/A | [Generic Backend](fig/backends/generic) |
108130

109-
## Alternative Deployment Options
131+
### Alternative Deployment Options
110132

111133
> :exclamation: Prior to any deployment, ensure you refer to the [configuration options](./config/config.ini) available to the application :exclamation:
112134
113-
### Installation to Kubernetes using the helm chart
135+
#### Installation to Kubernetes using the helm chart
114136

115137
Please refer to the [FIG helm chart documentation](https://github.com/CrowdStrike/falcon-helm/tree/main/helm-charts/falcon-integration-gateway) for detailed instructions on deploying the FIG via helm chart for your respective backend(s).
116138

117-
### With Docker/Podman
139+
#### With Docker/Podman
118140

119141
To install as a container:
120142

@@ -142,12 +164,14 @@ To install as a container:
142164
docker logs <container>
143165
```
144166

145-
### From the Python Package Index (PyPI)
167+
#### From the Python Package Index (PyPI)
146168

147-
> [!IMPORTANT]
148-
> Falcon Integration Gateway (FIG) versions below 3.2.1 on PyPI are broken and will not install correctly. Please ensure you install version 3.2.1 or higher from PyPI.
169+
Falcon Integration Gateway (FIG) is available on the [Python Package Index](https://pypi.org/project/falcon-integration-gateway/).
170+
171+
> [!WARNING]
172+
> Falcon Integration Gateway (FIG) versions below 3.2.2 on PyPI are broken and will not install correctly. Please ensure you install version 3.2.2 or higher from PyPI.
149173

150-
1. Install the package using pip:
174+
1. Install the package:
151175

152176
```bash
153177
python3 -m pip install falcon-integration-gateway
@@ -178,15 +202,15 @@ To install as a container:
178202
python3 -m fig
179203
```
180204

181-
#### Updating the FIG from PyPI
205+
##### Updating the FIG from PyPI
182206

183207
To update the FIG package from PyPI, run:
184208

185209
```bash
186-
python3 -m pip install --upgrade falcon-integration-gateway
210+
python3 -m pip install falcon-integration-gateway --upgrade
187211
```
188212

189-
### From Git Repository
213+
#### From Git Repository
190214

191215
> [!NOTE]
192216
> This method requires Python 3.7 or higher and a python package manager such as `pip` to be installed on your system.
@@ -212,11 +236,11 @@ python3 -m pip install --upgrade falcon-integration-gateway
212236
python3 -m fig
213237
```
214238

215-
#### Updating the FIG from the Git Repository
239+
##### Updating the FIG from the Git Repository
216240

217241
Depending on which configuration method you are using, follow the steps below to update the FIG from the Git repository.
218242

219-
##### config.ini
243+
###### config.ini
220244

221245
If you have made any changes to the `config.ini` file, you can update the FIG by following these steps:
222246

@@ -242,7 +266,7 @@ python3 -m fig
242266

243267
This method ensures that your configuration settings are preserved while updating the FIG to the latest version.
244268

245-
#### Environment Variables (only)
269+
##### Environment Variables (only)
246270

247271
If you are only using environment variables to configure the FIG, you can update the FIG by following these steps:
248272

docs/listings/gke/deployer/chart/falcon-integration-gateway/Chart.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,4 +21,4 @@ version: 0.2.0
2121
# incremented each time you make changes to the application. Versions are not expected to
2222
# follow Semantic Versioning. They should reflect the version the application is using.
2323
# It is recommended to use it with quotes.
24-
appVersion: 3.2.1
24+
appVersion: 3.2.2

docs/listings/gke/deployer/chart/falcon-integration-gateway/templates/application.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ spec:
2323
kind: Secret
2424
descriptor:
2525
type: falcon-integration-gateway
26-
version: '3.2.1'
26+
version: '3.2.2'
2727
description: |-
2828
Falcon Integration Gateway (FIG) forwards threat detection findings from CrowdStrike Falcon
2929
platform to the backend of your choice. This instance forwards detection findings to GCP

docs/listings/gke/deployer/schema.yaml

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ x-google-marketplace:
33

44
applicationApiVersion: v1beta1
55

6-
publishedVersion: "3.2.1"
6+
publishedVersion: "3.2.2"
77
publishedVersionMetadata:
88
releaseNote: >-
99
3.1
@@ -14,13 +14,13 @@ x-google-marketplace:
1414
1515
clusterConstraints:
1616
resources:
17-
- replicas: 1
18-
requests:
19-
cpu: 100m
20-
memory: 300Mi
17+
- replicas: 1
18+
requests:
19+
cpu: 100m
20+
memory: 300Mi
2121

2222
images:
23-
'': # Primary image has no name.
23+
"": # Primary image has no name.
2424
properties:
2525
imageRepo:
2626
type: REPO_WITH_REGISTRY
@@ -45,10 +45,10 @@ properties:
4545
type: STRING
4646
default: us-1
4747
enum:
48-
- 'us-1'
49-
- 'us-2'
50-
- 'eu-1'
51-
- 'us-gov-1'
48+
- "us-1"
49+
- "us-2"
50+
- "eu-1"
51+
- "us-gov-1"
5252
falcon.client_id:
5353
title: "Falcon API OAuth2 Credentials: Client ID"
5454
description: "API keypair used to authenticate with Falcon Platform and to initiate streaming session. Only the following permissions are required: READ 'Event streams' and READ 'Hosts'"
@@ -69,14 +69,14 @@ properties:
6969
type: MASKED_FIELD
7070

7171
required:
72-
- name
73-
- namespace
74-
- falcon.client_id
75-
- falcon.client_secret
76-
- falcon.cloud_region
77-
- cloud.google.application_credentials
72+
- name
73+
- namespace
74+
- falcon.client_id
75+
- falcon.client_secret
76+
- falcon.cloud_region
77+
- cloud.google.application_credentials
7878

7979
form:
80-
- widget: help
81-
description: |-
82-
<a href="https://github.com/CrowdStrike/falcon-integration-gateway/blob/main/docs/listings/gke/UserGuide.md">Deployment Guide</a>
80+
- widget: help
81+
description: |-
82+
<a href="https://github.com/CrowdStrike/falcon-integration-gateway/blob/main/docs/listings/gke/UserGuide.md">Deployment Guide</a>

fig/__init__.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
__version__ = '3.2.1'
1+
__version__ = '3.2.2'

0 commit comments

Comments
 (0)