Skip to content

Latest commit

 

History

History
 
 

falco-exporter

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 
 
 

falco-exporter Helm Chart

falco-exporter is a Prometheus Metrics Exporter for Falco output events.

Before using this chart, you need Falco installed and running with the gRPC Output enabled (over Unix socket by default).

This chart is compatible with the Falco Chart version v1.2.0 or greater. Instructions to enable the gRPC Output in the Falco Helm Chart can be found here. We also strongly recommend using gRPC over Unix socket.

Introduction

The chart deploys falco-exporter as Daemon Set on your the Kubernetes cluster. If a Prometheus installation is running within your cluster, metrics provided by falco-exporter will be automatically discovered.

Adding falcosecurity repository

Prior to installing the chart, add the falcosecurity charts repository:

helm repo add falcosecurity https://falcosecurity.github.io/charts
helm repo update

Installing the Chart

To install the chart with the release name falco-exporter run:

helm install falco-exporter falcosecurity/falco-exporter

After a few seconds, falco-exporter should be running.

Tip: List all releases using helm list, a release is a name used to track a specific deployment

Uninstalling the Chart

To uninstall the falco-exporter deployment:

helm uninstall falco-exporter

The command removes all the Kubernetes components associated with the chart and deletes the release.

Configuration

The following table lists the main configurable parameters of the chart and their default values.

Parameter Description Default
image.repository The image repository to pull from falcosecurity/falco-exporter
image.tag The image tag to pull 0.3.0
image.pullPolicy The image pull policy IfNotPresent
falco.grpcUnixSocketPath Unix socket path for connecting to a Falco gRPC server unix:///var/run/falco/falco.sock
falco.grpcTimeout The image tag to pull 2m
serviceMonitor.enabled Enabled deployment of a Prometheus operator Service Monitor false
serviceMonitor.additionalLabels Add additional Labels to the Service Monitor {}
serviceMonitor.interval Specify a user defined interval for the Service Monitor ""
serviceMonitor.scrapeTimeout Specify a user defined scrape timeout for the Service Monitor ""
grafanaDashboard.enabled Enable the falco security dashboard, see https://github.com/falcosecurity/falco-exporter#grafana false
grafanaDashboard.namespace The namespace to deploy the dashboard configmap in default

Please, refer to values.yaml for the full list of configurable parameters.

Specify each parameter using the --set key=value[,key=value] argument to helm install. For example,

helm install falco-exporter --set falco.grpcTimeout=3m falcosecurity/falco-exporter

Alternatively, a YAML file that specifies the parameters' values can be provided while installing the chart. For example,

helm install falco-exporter -f values.yaml falcosecurity/falco-exporter

Tip: You can use the default values.yaml