You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/deployment/openshift/resources/node/README.md
+8-3Lines changed: 8 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -60,14 +60,14 @@ spec:
60
60
| installNamespace | (optional) Override the default namespace of falcon-system |
61
61
| node.tolerations | (optional) See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for examples on configuring tolerations |
62
62
| node.nodeAffinity | (optional) See https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/ for examples on configuring nodeAffinity |
63
-
| node.image | (optional) Location of the Falcon Sensor Image. Specify only when you mirror the original image to your own image repository |
63
+
| node.image | (optional) Location of the Falcon Sensor Image. Use this field only when pulling from non-CrowdStrike registries (e.g., when you mirror the original image to your own image repository). For CrowdStrike registries, use `node.version` instead. |
64
64
| node.imagePullPolicy | (optional) Override the default Falcon Container image pull policy of Always |
65
65
| node.imagePullSecrets | (optional) list of references to secrets to use for pulling image from image_override location. |
66
66
| node.terminationGracePeriod | (optional) Kills pod after a specified amount of time (in seconds). Default is 60 seconds. |
67
67
| node.serviceAccount.annotations | (optional) Annotations that should be added to the Service Account (e.g. for IAM role association) |
68
68
| node.backend | (optional) Configure the backend mode for Falcon Sensor (allowed values: kernel, bpf) |
69
69
| node.disableCleanup | (optional) Cleans up `/opt/CrowdStrike` on the nodes by deleting the files and directory. |
70
-
| node.version | (optional) Enforce particular Falcon Sensor version to be installed (example: "6.35", "6.35.0-13207") |
70
+
| node.version | (optional) Enforce particular Falcon Sensor version to be installed (example: "6.35", "6.35.0-13207"). Use this field when pulling from CrowdStrike registries (when using Falcon API credentials). For non-CrowdStrike registries, use `node.image` instead. |
71
71
| node.gke.autopilot | (optional) Enable GKE Autopilot support for FalconNodeSensor. |
72
72
| node.gke.deployAllowListVersion | (optional) WorkloadAllowlist version for the sensor daemonset when using GKE AutoPilot. (example: "v1.0.3"for crowdstrike-falconsensor-deploy-allowlist-v1.0.3) |
73
73
| node.gke.cleanupAllowListVersion | (optional) WorkloadAllowlist version for the cleanup daemonset when using GKE AutoPilot (example: "v1.0.2"for crowdstrike-falconsensor-cleanup-allowlist-v1.0.2) |
To upgrade the sensor version, simply add and/or update the `version` field in the FalconNodeSensor resource and apply the change. Alternatively if the `image` field was used instead of using the Falcon API credentials, add and/or update the `image` field in the FalconNodeSensor resource and apply the change. The operator will detect the change and perform the upgrade by restarting the daemonset pods one by one.
189
+
To upgrade the sensor version:
190
+
191
+
- **For CrowdStrike registries** (when using Falcon API credentials): Add and/or update the `version` field in the FalconNodeSensor resource and apply the change.
192
+
- **For non-CrowdStrike registries**: Add and/or update the `image` field in the FalconNodeSensor resource and apply the change.
193
+
194
+
The operator will detect the change and perform the upgrade by restarting the daemonset pods one by one.
Copy file name to clipboardExpand all lines: docs/resources/node/README.md
+8-3Lines changed: 8 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -60,14 +60,14 @@ spec:
60
60
| installNamespace | (optional) Override the default namespace of falcon-system |
61
61
| node.tolerations | (optional) See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for examples on configuring tolerations |
62
62
| node.nodeAffinity | (optional) See https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/ for examples on configuring nodeAffinity |
63
-
| node.image | (optional) Location of the Falcon Sensor Image. Specify only when you mirror the original image to your own image repository |
63
+
| node.image | (optional) Location of the Falcon Sensor Image. Use this field only when pulling from non-CrowdStrike registries (e.g., when you mirror the original image to your own image repository). For CrowdStrike registries, use `node.version` instead. |
64
64
| node.imagePullPolicy | (optional) Override the default Falcon Container image pull policy of Always |
65
65
| node.imagePullSecrets | (optional) list of references to secrets to use for pulling image from image_override location. |
66
66
| node.terminationGracePeriod | (optional) Kills pod after a specified amount of time (in seconds). Default is 60 seconds. |
67
67
| node.serviceAccount.annotations | (optional) Annotations that should be added to the Service Account (e.g. for IAM role association) |
68
68
| node.backend | (optional) Configure the backend mode for Falcon Sensor (allowed values: kernel, bpf) |
69
69
| node.disableCleanup | (optional) Cleans up `/opt/CrowdStrike` on the nodes by deleting the files and directory. |
70
-
| node.version | (optional) Enforce particular Falcon Sensor version to be installed (example: "6.35", "6.35.0-13207") |
70
+
| node.version | (optional) Enforce particular Falcon Sensor version to be installed (example: "6.35", "6.35.0-13207"). Use this field when pulling from CrowdStrike registries (when using Falcon API credentials). For non-CrowdStrike registries, use `node.image` instead. |
71
71
| node.gke.autopilot | (optional) Enable GKE Autopilot support for FalconNodeSensor. |
72
72
| node.gke.deployAllowListVersion | (optional) WorkloadAllowlist version for the sensor daemonset when using GKE AutoPilot. (example: "v1.0.3"for crowdstrike-falconsensor-deploy-allowlist-v1.0.3) |
73
73
| node.gke.cleanupAllowListVersion | (optional) WorkloadAllowlist version for the cleanup daemonset when using GKE AutoPilot (example: "v1.0.2"for crowdstrike-falconsensor-cleanup-allowlist-v1.0.2) |
To upgrade the sensor version, simply add and/or update the `version` field in the FalconNodeSensor resource and apply the change. Alternatively if the `image` field was used instead of using the Falcon API credentials, add and/or update the `image` field in the FalconNodeSensor resource and apply the change. The operator will detect the change and perform the upgrade by restarting the daemonset pods one by one.
189
+
To upgrade the sensor version:
190
+
191
+
- **For CrowdStrike registries** (when using Falcon API credentials): Add and/or update the `version` field in the FalconNodeSensor resource and apply the change.
192
+
- **For non-CrowdStrike registries**: Add and/or update the `image` field in the FalconNodeSensor resource and apply the change.
193
+
194
+
The operator will detect the change and perform the upgrade by restarting the daemonset pods one by one.
Copy file name to clipboardExpand all lines: docs/src/resources/node.md.tmpl
+8-3Lines changed: 8 additions & 3 deletions
Original file line number
Diff line number
Diff line change
@@ -60,14 +60,14 @@ spec:
60
60
| installNamespace | (optional) Override the default namespace of falcon-system |
61
61
| node.tolerations| (optional) See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for examples on configuring tolerations |
62
62
| node.nodeAffinity| (optional) See https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/ for examples on configuring nodeAffinity |
63
-
| node.image| (optional) Location of the Falcon Sensor Image.Specify only when you mirror the original image to your own image repository|
63
+
| node.image| (optional) Location of the Falcon Sensor Image.Use this field only when pulling from non-CrowdStrike registries (e.g., when you mirror the original image to your own image repository). For CrowdStrike registries, use `node.version` instead.|
64
64
| node.imagePullPolicy| (optional) Override the default Falcon Container image pull policy of Always |
65
65
| node.imagePullSecrets| (optional) list of references to secrets to use for pulling image from image_override location.|
66
66
| node.terminationGracePeriod| (optional) Kills pod after a specified amount of time (in seconds). Default is 60 seconds.|
67
67
| node.serviceAccount.annotations| (optional) Annotations that should be added to the Service Account (e.g. for IAM role association) |
68
68
| node.backend| (optional) Configure the backend mode for Falcon Sensor (allowed values: kernel, bpf) |
69
69
| node.disableCleanup| (optional) Cleans up `/opt/CrowdStrike` on the nodes by deleting the files and directory.|
70
-
| node.version| (optional) Enforce particular Falcon Sensor version to be installed (example: "6.35", "6.35.0-13207")|
70
+
| node.version| (optional) Enforce particular Falcon Sensor version to be installed (example: "6.35", "6.35.0-13207"). Use this field when pulling from CrowdStrike registries (when using Falcon API credentials). For non-CrowdStrike registries, use `node.image` instead.|
71
71
| node.gke.autopilot| (optional) Enable GKE Autopilot support for FalconNodeSensor.|
72
72
| node.gke.deployAllowListVersion| (optional) WorkloadAllowlist version for the sensor daemonset when using GKE AutoPilot. (example: "v1.0.3" for crowdstrike-falconsensor-deploy-allowlist-v1.0.3) |
73
73
| node.gke.cleanupAllowListVersion| (optional) WorkloadAllowlist version for the cleanup daemonset when using GKE AutoPilot (example: "v1.0.2" for crowdstrike-falconsensor-cleanup-allowlist-v1.0.2) |
@@ -160,7 +160,12 @@ To uninstall the FalconNodeSensor CR, simply remove the FalconNodeSensor resourc
160
160
161
161
### Sensor upgrades
162
162
163
-
To upgrade the sensor version, simply add and/or update the `version` field in the FalconNodeSensor resource and apply the change. Alternatively if the `image` field was used instead of using the Falcon API credentials, add and/or update the `image` field in the FalconNodeSensor resource and apply the change. The operator will detect the change and perform the upgrade by restarting the daemonset pods one by one.
163
+
To upgrade the sensor version:
164
+
165
+
- **For CrowdStrike registries** (when using Falcon API credentials): Add and/or update the `version` field in the FalconNodeSensor resource and apply the change.
166
+
- **For non-CrowdStrike registries**: Add and/or update the `image` field in the FalconNodeSensor resource and apply the change.
167
+
168
+
The operator will detect the change and perform the upgrade by restarting the daemonset pods one by one.
0 commit comments