Ajinkya16
Ajinkya16

Reputation: 335

Falco deployment in namespace

How do we deploy falco in adifferent namespace as it is deployed in the default namespace? How do we specify on which namespace to install falco charts?

Upvotes: 0

Views: 281

Answers (2)

Chris
Chris

Reputation: 59

There are some options that allow deploying Falco on Kubernetes non-default namespace (Kubernetes manifest or helm). Using helm with a package from an official document seems the fastest way.

# adding repository
helm repo add falcosecurity https://falcosecurity.github.io/charts
helm repo update
# install falco
helm install falco falcosecurity/falco --namespace falco --create-namespace

The example above will deploy falco in falco namespace. To verify the falco deploying status, get pods status & logs:

kubectl get pods -n falco -o wide
kubectl logs <falco-pod-name> -n falco

If you plan deploy Falco on Kubernetes (EKS), follow the How to deploy Falco on Kubernetes (EKS). If you want to deploy Falco on Kubernetes and monitor EKS audit logs, follow the Monitoring EKS audit logs with Falco security document.

Upvotes: 0

P....
P....

Reputation: 18391

You may use -n flag to specify the custom namespace name and --create-namespace flag to create the namespace if its not already present.

helm install falco falcosecurity/falco -n falco --create-namespace

Upvotes: 2

Related Questions