diff --git a/docker/README.md b/docker/README.md index 726b2642..0e78a8f3 100644 --- a/docker/README.md +++ b/docker/README.md @@ -26,5 +26,5 @@ The goal of these container images is to reduce the size of the underlying Falco ### Init Containers These container images allow for the delivery of the kernel module or eBPF probe either via HTTP or via a container image. - `kernel/linuxkit`: Multistage Dockerfile to build a Falco kernel module for Linuxkit (Docker Desktop). Generates an alpine based container image with the kernel module, and `insmod` as the container `CMD`. - - `kernel/httploader`: Multistage Dockerfile to build a Go based application to download (via HTTPS) and load a Falco kernel module. The resulting container image can be ran as an `initContainer` to load the Falco module before Falco starts. + - `kernel/probeloader`: Multistage Dockerfile to build a Go based application to download (via HTTPS) and load a Falco kernel module. The resulting container image can be ran as an `initContainer` to load the Falco module before Falco starts. diff --git a/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap-slim.yaml b/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap-slim.yaml index bc129c5c..955a2a12 100644 --- a/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap-slim.yaml +++ b/integrations/k8s-using-daemonset/k8s-with-rbac/falco-daemonset-configmap-slim.yaml @@ -14,17 +14,16 @@ spec: spec: serviceAccount: falco-account initContainers: - - name: httploader - image: falcosecurity/httploader:latest - command: ['/httploader'] + - name: probeloader + image: falcosecurity/probeloader:latest securityContext: privileged: true #env: - # - name: FALCO_VERSION + # - name: FALCOCTL_FALCO_VERSION # value: 0.17.0 - # - name: FALCO_PROBE_URL + # - name: FALCOCTL_FALCO_PROBE_URL # value: - # - name: FALCO_PROBE_REPO + # - name: FALCOCTL_FALCO_PROBE_REPO # value: "https://s3.amazonaws.com/download.draios.com/stable/sysdig-probe-binaries/" volumeMounts: - mountPath: /host/boot @@ -32,7 +31,7 @@ spec: readOnly: true containers: - name: falco - image: falcosecurity/falco-minimal:latest + image: falcosecurity/falco:0.17.1-slim securityContext: privileged: true # Uncomment the 3 lines below to enable eBPF support for Falco.