values.yaml

# Default values for falco-exporter.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

service:
  type: ClusterIP
  clusterIP: None
  port: 9376
  targetPort: 9376
  nodePort:
  labels: {}
  annotations:
    prometheus.io/scrape: "true"
    prometheus.io/port: "9376"
  # Enable Mutual TLS for HTTP metrics server
  mTLS:
    enabled: false

# /readiness and /liveness probes port
probesPort: 19376

image:
  registry: docker.io
  repository: falcosecurity/falco-exporter
  tag: 0.7.0
  pullPolicy: IfNotPresent

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

priorityClassName:

falco:
  grpcUnixSocketPath: "unix:///var/run/falco/falco.sock"
  grpcTimeout: 2m

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template.
  # If set and create is false, an already existing serviceAccount must be provided.
  name:

podSecurityPolicy:
  # Specifies whether a PSP, Role and RoleBinding should be created
  create: false
  # Annotations to add to the PSP, Role and RoleBinding
  annotations: {}
  # The name of the PSP, Role and RoleBinding to use.
  # If not set and create is true, a name is generated using the fullname template
  name:

podSecurityContext:
  {}
  # fsGroup: 2000

daemonset:
  # Annotations to add to the DaemonSet pods
  annotations: {}
  podLabels: {}

securityContext:
  {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

resources:
  {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

nodeSelector: {}

# Allow falco-exporter to run on Kubernetes 1.6 masters.
tolerations:
  - effect: NoSchedule
    key: node-role.kubernetes.io/master

affinity: {}

serviceMonitor:
  # Enable the deployment of a Service Monitor for the Prometheus Operator.
  enabled: false
  # Specify Additional labels to be added on the Service Monitor.
  additionalLabels: {}
  # Specify a user defined interval. When not specified Prometheus default interval is used.
  interval: ""
  # Specify a user defined scrape timeout. When not specified Prometheus default scrape timeout is used.
  scrapeTimeout: ""

grafanaDashboard:
  enabled: false
  namespace: default
  prometheusDatasourceName: Prometheus
scc:
  # true here enabled creation of Security Context Constraints in Openshift
  create: true

# Create PrometheusRules for alerting on priority events
prometheusRules:
  enabled: false
  alerts:
    warning:
      enabled: true
      rate_interval: "5m"
      threshold: 0
    error:
      enabled: true
      rate_interval: "5m"
      threshold: 0
    critical:
      enabled: true
      rate_interval: "5m"
      threshold: 0
    alert:
      enabled: true
      rate_interval: "5m"
      threshold: 0
    emergency:
      enabled: true
      rate_interval: "1m"
      threshold: 0
    additionalAlerts: {}