Skip to content

Commit f44cb94

Browse files
akash4shakash4sh
authored
Merge pull request #284 from akash4sh/main
Add falco-exporter chart
2 parents 668f69e + 12fcf94 commit f44cb94

20 files changed

+1921
-0
lines changed

‎charts/falco-exporter/CHANGELOG.md‎

Lines changed: 231 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,231 @@
1+
# Change Log
2+
3+
This file documents all notable changes to `falco-exporter` Helm Chart. The release
4+
numbering uses [semantic versioning](http://semver.org).
5+
6+
## v0.11.0
7+
8+
* updated grafana dashboard
9+
10+
## v0.10.1
11+
12+
* Enhanced the service Monitor to support additional Properties.
13+
14+
## v0.10.0
15+
16+
* added ability to set the grafana folder annotation name
17+
18+
## v0.9.11
19+
20+
* fix dead links in README.md
21+
22+
## v0.9.10
23+
24+
* update configuration values in README.md
25+
* introduce helm docs for the chart
26+
27+
## v0.9.9
28+
29+
* update tolerations
30+
31+
## v0.9.8
32+
33+
* add annotation for set of folder's grafana-chart
34+
35+
## v0.9.7
36+
37+
* noop change just to test the ci
38+
39+
## v0.9.6
40+
41+
### Minor Changes
42+
43+
* Bump falco-exporter to v0.8.3
44+
45+
## v0.9.5
46+
47+
### Minor Changes
48+
49+
* Removed unnecessary capabilities from security context
50+
* Setted filesystem on read-only
51+
52+
## v0.9.4
53+
54+
### Minor Changes
55+
56+
* Add options to configure readiness/liveness probe values
57+
58+
## v0.9.3
59+
60+
### Minor Changes
61+
62+
* Bump falco-exporter to v0.8.2
63+
64+
## v0.9.2
65+
66+
### Minor Changes
67+
68+
* Add option to place Grafana dashboard in a folder
69+
70+
## v0.9.1
71+
72+
### Minor Changes
73+
74+
* Fix PSP allowed host path prefix to match grpc socket path change.
75+
76+
## v0.8.3
77+
78+
### Major Changes
79+
80+
* Changing the grpc socket path from `unix:///var/run/falco/falco.soc` to `unix:///run/falco/falco.sock`.
81+
82+
### Minor Changes
83+
84+
* Bump falco-exporter to v0.8.0
85+
86+
## v0.8.2
87+
88+
### Minor Changes
89+
90+
* Support configuration of updateStrategy of the Daemonset
91+
92+
## v0.8.0
93+
94+
* Upgrade falco-exporter version to v0.7.0 (see the [falco-exporter changelog](https://github.com/falcosecurity/falco-exporter/releases/tag/v0.7.0))
95+
96+
### Major Changes
97+
98+
* Add option to add labels to the Daemonset pods
99+
100+
## v0.7.2
101+
102+
### Minor Changes
103+
104+
* Add option to add labels to the Daemonset pods
105+
106+
## v0.7.1
107+
108+
### Minor Changes
109+
110+
* Fix `FalcoExporterAbsent` expression
111+
112+
## v0.7.0
113+
114+
### Major Changes
115+
116+
* Adds ability to create custom PrometheusRules for alerting
117+
118+
## v0.6.2
119+
120+
## Minor Changes
121+
122+
* Add Check availability of 'monitoring.coreos.com/v1' api version
123+
124+
## v0.6.1
125+
126+
### Minor Changes
127+
128+
* Add option the add annotations to the Daemonset
129+
130+
## v0.6.0
131+
132+
### Minor Changes
133+
134+
* Upgrade falco-exporter version to v0.6.0 (see the [falco-exporter changelog](https://github.com/falcosecurity/falco-exporter/releases/tag/v0.6.0))
135+
136+
## v0.5.2
137+
138+
### Minor changes
139+
140+
* Make image registry configurable
141+
142+
## v0.5.1
143+
144+
* Display only non-zero rates in Grafana dashboard template
145+
146+
## v0.5.0
147+
148+
### Minor Changes
149+
150+
* Upgrade falco-exporter version to v0.5.0
151+
* Add metrics about Falco drops
152+
* Make `unix://` prefix optional
153+
154+
## v0.4.2
155+
156+
### Minor Changes
157+
158+
* Fix Prometheus datasource name reference in grafana dashboard template
159+
160+
## v0.4.1
161+
162+
### Minor Changes
163+
164+
* Support release namespace configuration
165+
166+
## v0.4.0
167+
168+
### Mayor Changes
169+
170+
* Add Mutual TLS for falco-exporter enable/disabled feature
171+
172+
## v0.3.8
173+
174+
### Minor Changes
175+
176+
* Replace extensions apiGroup/apiVersion because of deprecation
177+
178+
## v0.3.7
179+
180+
### Minor Changes
181+
182+
* Fixed falco-exporter PSP by allowing secret volumes
183+
184+
## v0.3.6
185+
186+
### Minor Changes
187+
188+
* Add SecurityContextConstraint to allow deploying in Openshift
189+
190+
## v0.3.5
191+
192+
### Minor Changes
193+
194+
* Added the possibility to automatically add a PSP (in combination with a Role and a RoleBindung) via the podSecurityPolicy values
195+
* Namespaced the falco-exporter ServiceAccount and Service
196+
197+
## v0.3.4
198+
199+
### Minor Changes
200+
201+
* Add priorityClassName to values
202+
203+
## v0.3.3
204+
205+
### Minor Changes
206+
207+
* Add grafana dashboard to helm chart
208+
209+
## v0.3.2
210+
211+
### Minor Changes
212+
213+
* Fix for additional labels for falco-exporter servicemonitor
214+
215+
## v0.3.1
216+
217+
### Minor Changes
218+
219+
* Added the support to deploy a Prometheus Service Monitor. Is disables by default.
220+
221+
## v0.3.0
222+
223+
### Major Changes
224+
225+
* Chart moved to [falcosecurity/charts](https://github.com/falcosecurity/charts) repository
226+
* gRPC over unix socket support (by default)
227+
* Updated falco-exporter version to `0.3.0`
228+
229+
### Minor Changes
230+
231+
* README.md and CHANGELOG.md added

‎charts/falco-exporter/Chart.yaml‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
annotations:
2+
artifacthub.io/changes: |
3+
- "✨ update chart to version 0.11.0"
4+
apiVersion: v2
5+
appVersion: 0.8.3
6+
description: Prometheus Metrics Exporter for Falco output events
7+
keywords:
8+
- monitoring
9+
- security
10+
- alerting
11+
- metric
12+
- troubleshooting
13+
- run-time
14+
maintainers:
15+
- email: me@leonardograsso.com
16+
name: leogr
17+
name: falco-exporter
18+
sources:
19+
- https://github.com/falcosecurity/falco-exporter
20+
type: application
21+
version: 1.0.0

‎charts/falco-exporter/README.gotmpl‎

Lines changed: 75 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,75 @@
1+
# falco-exporter Helm Chart
2+
3+
[falco-exporter](https://github.com/falcosecurity/falco-exporter) is a Prometheus Metrics Exporter for Falco output events.
4+
5+
Before using this chart, you need [Falco installed](https://falco.org/docs/installation/) and running with the [gRPC Output](https://falco.org/docs/grpc/) enabled (over Unix socket by default).
6+
7+
This chart is compatible with the [Falco Chart](https://github.com/falcosecurity/charts/tree/master/charts/falco) version `v1.2.0` or greater. Instructions to enable the gRPC Output in the Falco Helm Chart can be found [here](https://github.com/falcosecurity/charts/tree/master/charts/falco#enabling-grpc). We also strongly recommend using [gRPC over Unix socket](https://github.com/falcosecurity/charts/tree/master/charts/falco#grpc-over-unix-socket-default).
8+
9+
## Introduction
10+
11+
The chart deploys **falco-exporter** as Daemon Set on your the Kubernetes cluster. If a [Prometheus installation](https://github.com/helm/charts/tree/master/stable/prometheus) is running within your cluster, metrics provided by **falco-exporter** will be automatically discovered.
12+
13+
## Adding `falcosecurity` repository
14+
15+
Prior to installing the chart, add the `falcosecurity` charts repository:
16+
17+
```bash
18+
helm repo add falcosecurity https://falcosecurity.github.io/charts
19+
helm repo update
20+
```
21+
22+
## Installing the Chart
23+
24+
To install the chart with the release name `falco-exporter` run:
25+
26+
```bash
27+
helm install falco-exporter falcosecurity/falco-exporter
28+
```
29+
30+
After a few seconds, **falco-exporter** should be running.
31+
32+
> **Tip**: List all releases using `helm list`, a release is a name used to track a specific deployment
33+
34+
## Uninstalling the Chart
35+
36+
To uninstall the `falco-exporter` deployment:
37+
38+
```bash
39+
helm uninstall falco-exporter
40+
```
41+
42+
The command removes all the Kubernetes components associated with the chart and deletes the release.
43+
44+
```bash
45+
helm install falco-exporter --set falco.grpcTimeout=3m falcosecurity/falco-exporter
46+
```
47+
48+
Alternatively, a YAML file that specifies the parameters' values can be provided while installing the chart. For example,
49+
50+
```bash
51+
helm install falco-exporter -f values.yaml falcosecurity/falco-exporter
52+
```
53+
54+
### Enable Mutual TLS
55+
56+
Mutual TLS for `/metrics` endpoint can be enabled to prevent alerts content from being consumed by unauthorized components.
57+
58+
To install falco-exporter with Mutual TLS enabled, you have to:
59+
60+
```shell
61+
helm install falco-exporter \
62+
--set service.mTLS.enabled=true \
63+
--set-file service.mTLS.server.key=/path/to/server.key \
64+
--set-file service.mTLS.server.crt=/path/to/server.crt \
65+
--set-file service.mTLS.ca.crt=/path/to/ca.crt \
66+
falcosecurity/falco-exporter
67+
```
68+
69+
> **Tip**: You can use the default [values.yaml](values.yaml)
70+
71+
## Configuration
72+
73+
The following table lists the main configurable parameters of the {{ template "chart.name" . }} chart v{{ template "chart.version" . }} and their default values. Please, refer to [values.yaml](./values.yaml) for the full list of configurable parameters.
74+
75+
{{ template "chart.valuesSection" . }}

0 commit comments

Comments
 (0)