This file documents all notable changes to Falcosidekick Helm Chart. The release numbering uses semantic versioning.
Before release 0.1.20, the helm chart can be found in falcosidekick
repository.
- Fix the Falco Sidekick WEBUI_URL secret value.
- Align Web UI service port from values.yaml file with Falco Sidekick WEBUI_URL secret value.
- Enhanced the service Monitor to support additional Properties.
- Fix the promql query for prometheusRules: FalcoErrorOutputEventsRateHigh.
- Fix PrometheusRule duplicate alert name
- Fix the labels for the serviceMonitor
- Fix the error with the
NOTES
(index of untyped nil Use
) when the ingress is enabled to falcosidekick-ui
- Fix ServiceMonitor selector labels
- Fix duplicate component labels
- Fix ServiceMonitor port name and selector labels
- Align README values with the values.yaml file
- Fix a link in the falcosidekick README to the policy report output documentation
- Set Helm recommended labels (
app.kubernetes.io/name
,app.kubernetes.io/instance
,app.kubernetes.io/version
,helm.sh/chart
,app.kubernetes.io/part-of
,app.kubernetes.io/managed-by
) using helpers.tpl
- noop change to the chart itself. Updated makefile.
- Fix the condition for missing cert files
- Support extraArgs in the helm chart
- Fix the behavior with the
AWS IRSA
with a new valueaws.config.useirsa
- Add a section in the README to describe how to use a subpath for
Falcosidekick-ui
ingress - Add a
ServiceMonitor
for prometheus-operator - Add a
PrometheusRule
for prometheus-operator
- noop change just to test the ci
- Fix volume mount when
config.tlsserver.servercrt
,config.tlsserver.serverkey
andconfig.tlsserver.cacrt
variables are defined.
- Allow to set (m)TLS Server cryptographic material via
config.tlsserver.servercrt
,config.tlsserver.serverkey
andconfig.tlsserver.cacrt
variables or throughconfig.tlsserver.existingSecret
variables.
- Fix the wrong key of the secret for the user
- Allow to set a password
webui.redis.password
for Redis forFalcosidekick-UI
- The user for
Falcosidekick-UI
is now set with an env var from a secret
- Support configuration of revisionHistoryLimit of the deployments
- Update Falcosidekick to 2.28.0
- Add Mutual TLS Client config
- Add TLS Server config
- Add
bracketreplacer
config - Add
customseveritymap
toalertmanager
output - Add Drop Event config to
alertmanager
output - Add
customheaders
toelasticsearch
output - Add
customheaders
toloki
output - Add
customheaders
tografana
output - Add
rolearn
andexternalid
foraws
outputs - Add
method
towebhook
output - Add
customattributes
togcp.pubsub
output - Add
region
topargerduty
output - Add
topiccreation
andtls
tokafka
output - Add
Grafana OnCall
output - Add
Redis
output - Add
Telegram
output - Add
N8N
output - Add
OpenObserver
output
- Fix interpolation of
SYSLOG_PORT
- Add
webui.allowcors
value forFalcosidekick-UI
- Change the docker image for the redis pod for falcosidekick-ui
- Add
affinity
,nodeSelector
andtolerations
values for the Falcosidekick test-connection pod
- Set extra labels and annotations for
AlertManager
only if they're not empty
- Fix Prometheus extralabels configuration in Falcosidekick
- Fix missing quotes in Falcosidekick-UI ttl argument
- Fix missing space in Falcosidekick-UI ttl argument
- Fix missing space in Falcosidekick-UI arguments
- upgrade Falcosidekick image to 2.27.0
- upgrade Falcosidekick-UI image to 2.1.0
- Add
Yandex Data Streams
output - Add
Node-Red
output - Add
MQTT
output - Add
Zincsearch
output - Add
Gotify
output - Add
Spyderbat
output - Add
Tekton
output - Add
TimescaleDB
output - Add
AWS Security Lake
output - Add
config.templatedfields
to set templated fields - Add
config.slack.channel
to overrideSlack
channel - Add
config.alertmanager.extralabels
andconfig.alertmanager.extraannotations
forAlertManager
output - Add
config.influxdb.token
,config.influxdb.organization
andconfig.influxdb.precision
forInfluxDB
output - Add
config.aws.checkidentity
to disallow STS checks - Add
config.smtp.authmechanism
,config.smtp.token
,config.smtp.identity
,config.smtp.trace
to manageSMTP
auth - Update default doc type for
Elastichsearch
- Add
config.loki.user
,config.loki.apikey
to manage auth to Grafana Cloud forLoki
output - Add
config.kafka.sasl
,config.kafka.async
,config.kafka.compression
,config.kafka.balancer
,config.kafka.clientid
to manage auth and communication forKafka
output - Add
config.syslog.format
to manage the format ofSyslog
payload - Add
webui.ttl
to set TTL of keys in Falcosidekick-UI - Add
webui.loglevel
to set log level in Falcosidekick-UI - Add
webui.user
to set log user:password in Falcosidekick-UI
- Fix: remove
namespace
fromclusterrole
andclusterrolebinding
metadata
- Support
storageEnabled
forredis
to allow ephemeral installs
- Removing unused Kafka config values
- Fixing Syslog's port import in
secrets.yaml
- Add
webui.externalRedis
withenabled
,url
andport
to values to set an external Redis database with RediSearch > v2 for the WebUI - Add
webui.redis.enabled
option to disable the deployment of the database. webui.redis.enabled
andwebui.externalRedis.enabled
are mutually exclusive
- Upgrade image to fix Panic of
Prometheus
output whencustomfields
is set - Add
extralabels
forLoki
andPrometheus
outputs to set fields to use as labels - Add
expiresafter
forAlertManager
output
- Support full configuration of
securityContext
blocks in falcosidekick and falcosidekick-ui deployments, and redis statefulset.
- Update Falcosidekick-UI image (fix wrong redirect to localhost when an ingress is used)
- Support
ingressClassName
field in falcosidekick ingresses.
- Add
Policy Report
output - Add
Syslog
output - Add
AWS Kinesis
output - Add
Zoho Cliq
output - Support IRSA for AWS authentication
- Upgrade Falcosidekick-UI to v2.0.1
- Allow to set custom Labels for pods
- Allow additional service-ui annotations
- Fix output after chart installation when ingress is enable
- Support
annotation
block in service
- Fix: Added the rule to use the podsecuritypolicy
- Fix: Added
ServiceAccountName
to the UI deployment
- Removes duplicate
Fission
keys from secret
- Support Ingress API version
networking.k8s.io/v1
, seeingress.hosts
andwebui.ingress.hosts
in values.yaml for a breaking change in thepath
parameter
- Fix: Remove the value for bucket of
Yandex S3
, it enabled the output by default
- Fix: set correct new image 2.24.0
- Add
Fission
output
- Add
Grafana
output - Add
Yandex Cloud S3
output - Add
Kafka REST
output
- Docker image is now available on AWS ECR Public Gallery (
--set image.registry=public.ecr.aws
)
- Enable extra volumes and volumemounts for
falcosidekick
via values
- Add AWS configuration field
config.aws.rolearn
- Make image registries for
falcosidekick
andfalcosidekick-ui
configurable
- Fix table formatting in
README.md
- Add missing
imagePullSecrets
infalcosidekick/templates/deployment-ui.yaml
- Add
GCP Cloud Run
output - Add
GCP Cloud Functions
output - Add
Wavefront
output - Allow MutualTLS for some outputs
- Add basic auth for Elasticsearch output
- Fix table formatting in
README.md
- Fix
config.azure.eventHub
parameter name inREADME.md
- Point to the correct name of aadpodidentnity
- Fix link to Falco in the
README.md
- Bump up version (
v1.0.1
) of image forfalcosidekick-ui
- Set default values for
OpenFaaS
output type parameters - Fixes of documentation
- Add config checksum annotation to deployment pods to restart pods on config change
- Fix statsd config options in the secret to make them match the docs
- Fix for
s3.bucket
, it should be empty
- Add
AWS S3
output - Add
GCP Storage
output - Add
RabbitMQ
output - Add
OpenFaas
output
- Updated falcosidekuck-ui default image version to
v0.2.0
- Fixed to specify
kafka.hostPort
instead ofkafka.url
- Fixed missing hyphen in podidentity
- Fix repo and tag for
ui
image
- Add
CLOUDEVENTS
output - Add
WEBUI
output
- Add details about syntax for adding
custom_fields
- Add
DATADOG_HOST
to secret
- Allow additional pod annotations
- Remove namespace condition in aad-pod-identity
- Add
Kubeless
output
- Add
PagerDuty
output
- Add option to use an existing secret
- Add option to add extra environment variables
- Add
Stan
output
- Use the Existing secret resource and add all possible variables to there, and make it simpler to read and less error-prone in the deployment resource
- Fix aws keys not being added to the deployment
- Fix helm test
- Update image to use release 2.19.1
- New outputs can be set :
Kafka
,AWS CloudWatchLogs
- Fixed GCP Pub/Sub values references in
deployment.yaml
- Support release namespace configuration
- New outputs can be set :
Googlechat
- New output can be set :
GCP PubSub
- Custom Headers can be set for
Webhook
output - Fix typo
aipKey
for OpsGenie output
- Fix falcosidekick configuration table to use full path of configuration properties in the
README.md
- New output can be set :
AWS SNS
- Metrics in
prometheus
format can be scrapped from/metrics
URI
- Replace extensions apiGroup/apiVersion because of deprecation
- Allow the creation of a PodSecurityPolicy, disabled by default
- Allow the configuration of the Pod securityContext, set default runAsUser and fsGroup values
- Remove duplicated
webhook
block invalues.yaml
- fake release for triggering CI for auto-publishing
- Add
imagePullSecrets
- Fix
Azure Indentity
case sensitive value
- New outputs can be set :
Azure Event Hubs
,Discord
- Fix wrong port name in output
- New outputs can be set :
Mattermost
,Rocketchat
- Add Pod Security Policy
- Fix wrong value reference for Elasticsearch output in deployment.yaml
- New output can be set :
DogStatsD
- New output can be set :
StatsD
- New output can be set :
Opsgenie
- New output can be set :
NATS
Falcosidekick
and its chart are now part offalcosecurity
organization
- Use more recent image with
Golang
1.14
- New output can be set :
Loki
- New output can be set :
SMTP
- New outputs can be set :
AWS Lambda
,AWS SQS
,Teams
- Initial release of Falcosidekick Helm Chart