diff --git a/charts/falco/CHANGELOG.md b/charts/falco/CHANGELOG.md index f4d7a5004..1a8a605d8 100644 --- a/charts/falco/CHANGELOG.md +++ b/charts/falco/CHANGELOG.md @@ -3,6 +3,20 @@ This file documents all notable changes to Falco Helm Chart. The release numbering uses [semantic versioning](http://semver.org). +## v4.8.2 + +* fix(falco): correctly mount host filesystems when driver.kind is auto + + When falco runs with kmod/module driver it needs special filesystems + to be mounted from the host such /dev and /sys/module/falco. + This commit ensures that we mount them in the falco container. + + Note that, the /sys/module/falco is now mounted as /sys/module since + we do not know which kind of driver will be used. The falco folder + exists under /sys/module only when the kernel module is loaded, + hence it's not possible to use the /sys/module/falco hostpath when driver.kind + is set to auto. + ## v4.8.1 * fix(falcosidekick): add support for custom service type for webui redis diff --git a/charts/falco/Chart.yaml b/charts/falco/Chart.yaml index 3ba5991dc..734ce0c46 100644 --- a/charts/falco/Chart.yaml +++ b/charts/falco/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: falco -version: 4.8.1 +version: 4.8.2 appVersion: "0.38.2" description: Falco keywords: diff --git a/charts/falco/README.md b/charts/falco/README.md index 65fe77f79..92d8c0136 100644 --- a/charts/falco/README.md +++ b/charts/falco/README.md @@ -581,7 +581,7 @@ If you use a Proxy in your cluster, the requests between `Falco` and `Falcosidek ## Configuration -The following table lists the main configurable parameters of the falco chart v4.8.1 and their default values. See [values.yaml](./values.yaml) for full list. +The following table lists the main configurable parameters of the falco chart v4.8.2 and their default values. See [values.yaml](./values.yaml) for full list. ## Values diff --git a/charts/falco/templates/pod-template.tpl b/charts/falco/templates/pod-template.tpl index e66f85503..1a098b3d0 100644 --- a/charts/falco/templates/pod-template.tpl +++ b/charts/falco/templates/pod-template.tpl @@ -151,12 +151,12 @@ spec: name: etc-fs readOnly: true {{- end -}} - {{- if and .Values.driver.enabled (or (eq .Values.driver.kind "kmod") (eq .Values.driver.kind "module")) }} + {{- if and .Values.driver.enabled (or (eq .Values.driver.kind "kmod") (eq .Values.driver.kind "module") (eq .Values.driver.kind "auto")) }} - mountPath: /host/dev name: dev-fs readOnly: true - name: sys-fs - mountPath: /sys/module/falco + mountPath: /sys/module {{- end }} {{- if and .Values.driver.enabled (and (eq .Values.driver.kind "ebpf") (contains "falco-no-driver" .Values.image.repository)) }} - name: debugfs @@ -249,13 +249,13 @@ spec: hostPath: path: /etc {{- end }} - {{- if and .Values.driver.enabled (or (eq .Values.driver.kind "kmod") (eq .Values.driver.kind "module")) }} + {{- if and .Values.driver.enabled (or (eq .Values.driver.kind "kmod") (eq .Values.driver.kind "module") (eq .Values.driver.kind "auto")) }} - name: dev-fs hostPath: path: /dev - name: sys-fs hostPath: - path: /sys/module/falco + path: /sys/module {{- end }} {{- if and .Values.driver.enabled (and (eq .Values.driver.kind "ebpf") (contains "falco-no-driver" .Values.image.repository)) }} - name: debugfs