Skip to content

Commit

Permalink
update(falco/gvisor): update gvisor-gke prese values file
Browse files Browse the repository at this point in the history
Signed-off-by: Aldo Lacuku <[email protected]>
  • Loading branch information
alacuku committed Jan 11, 2024
1 parent cc0cc29 commit 9960f35
Showing 1 changed file with 9 additions and 11 deletions.
20 changes: 9 additions & 11 deletions charts/falco/values-gvisor-gke.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -22,17 +22,15 @@ tolerations:
operator: Equal
value: gvisor

# Disable the driver since it is not needed.
# Enable gVisor and set the appropriate paths.
driver:
enabled: false

# Enable gVisor and set the appropriate paths.
gvisor:
enabled: true
runsc:
path: /home/containerd/usr/local/sbin
root: /run/containerd/runsc
config: /run/containerd/runsc/config.toml
kind: gvisor
gvisor:
runsc:
path: /home/containerd/usr/local/sbin
root: /run/containerd/runsc
config: /run/containerd/runsc/config.toml

# Enable the containerd collector to enrich the syscall events with metadata.
collectors:
Expand All @@ -57,11 +55,11 @@ falcoctl:
resolveDeps: false
# -- List of artifacts to be installed by the falcoctl init container.
# We do not recommend installing (or following) plugins for security reasons since they are executable objects.
refs: [falco-rules:1]
refs: [falco-rules:2]
follow:
# -- List of artifacts to be followed by the falcoctl sidecar container.
# We do not recommend installing (or following) plugins for security reasons since they are executable objects.
refs: [falco-rules:1]
refs: [falco-rules:2]

# Set this to true to force Falco so output the logs as soon as they are emmitted.
tty: false

0 comments on commit 9960f35

Please sign in to comment.