From 5952ddd5718fcdfeb069b8c0e1e265b9f845ab07 Mon Sep 17 00:00:00 2001 From: Andy Librian Date: Mon, 13 Dec 2021 06:12:44 +0700 Subject: [PATCH] docs: update readme, add notes for falco in GKE --- README.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/README.md b/README.md index 4fa47f55..95706d84 100644 --- a/README.md +++ b/README.md @@ -71,6 +71,15 @@ helm upgrade -i falco falcosecurity/falco -n falco -f falco-values.yaml \ --set-file customRules."tarian_rules\.yaml"=https://raw.githubusercontent.com/kube-tarian/tarian/main/dev/falco/tarian_rules.yaml ``` +On GKE, falco uses ebpf, so you will need to add + +``` +--set ebpf.enabled=true +``` + +to the helm command above. See also [Falco docs](https://falco.org/docs/getting-started/third-party/production/). + + ### Setup a Postgresql Database You can use a DB as a service from your Cloud Services or you can also run by yourself in the cluster. For example to install the DB in the cluster, run: