falco-exporter is a Prometheus Metrics Exporter for Falco output events.
Before using this chart, you need Falco installed and running with the gRPC Output enabled (over Unix socket by default).
This chart is compatible with the Falco Chart version v1.2.0
or greater. Instructions to enable the gRPC Output in the Falco Helm Chart can be found here. We also strongly recommend using gRPC over Unix socket.
The chart deploys falco-exporter as Daemon Set on your the Kubernetes cluster. If a Prometheus installation is running within your cluster, metrics provided by falco-exporter will be automatically discovered.
Prior to installing the chart, add the falcosecurity
charts repository:
helm repo add falcosecurity https://falcosecurity.github.io/charts
helm repo update
To install the chart with the release name falco-exporter
run:
helm install falco-exporter falcosecurity/falco-exporter
After a few seconds, falco-exporter should be running.
Tip: List all releases using
helm list
, a release is a name used to track a specific deployment
To uninstall the falco-exporter
deployment:
helm uninstall falco-exporter
The command removes all the Kubernetes components associated with the chart and deletes the release.
The following table lists the main configurable parameters of the chart and their default values.
Parameter | Description | Default |
---|---|---|
image.repository |
The image repository to pull from | falcosecurity/falco-exporter |
image.tag |
The image tag to pull | 0.3.0 |
image.pullPolicy |
The image pull policy | IfNotPresent |
falco.grpcUnixSocketPath |
Unix socket path for connecting to a Falco gRPC server | unix:///var/run/falco/falco.sock |
falco.grpcTimeout |
The image tag to pull | 2m |
serviceMonitor.enabled |
Enabled deployment of a Prometheus operator Service Monitor | false |
serviceMonitor.additionalLabels |
Add additional Labels to the Service Monitor | {} |
serviceMonitor.interval |
Specify a user defined interval for the Service Monitor | "" |
serviceMonitor.scrapeTimeout |
Specify a user defined scrape timeout for the Service Monitor | "" |
grafanaDashboard.enabled |
Enable the falco security dashboard, see https://github.com/falcosecurity/falco-exporter#grafana | false |
grafanaDashboard.namespace |
The namespace to deploy the dashboard configmap in | default |
Please, refer to values.yaml for the full list of configurable parameters.
Specify each parameter using the --set key=value[,key=value]
argument to helm install
. For example,
helm install falco-exporter --set falco.grpcTimeout=3m falcosecurity/falco-exporter
Alternatively, a YAML file that specifies the parameters' values can be provided while installing the chart. For example,
helm install falco-exporter -f values.yaml falcosecurity/falco-exporter
Tip: You can use the default values.yaml