falco-exporter

Falco Exporter

Chainguard's redistribution of the falco-exporter Helm chart, pre-configured with hardened Chainguard Images.

Prerequisites

Authentication is required. First, authenticate with Chainguard:

chainctl auth login
chainctl auth configure-docker --pull-token --save
helm registry login cgr.dev

Create an image pull secret:

kubectl create secret docker-registry cgr-pull-secret \
  --docker-server=cgr.dev \
  --docker-username="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Username')" \
  --docker-password="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Secret')" \
  --namespace falco-exporter

Installation

falco-exporter scrapes a running Falco instance over gRPC, so Falco must be installed first (with gRPC output enabled).

helm install falco-exporter oci://cgr.dev/ORGANIZATION/charts/falco-exporter \
  --namespace falco-exporter \
  --create-namespace \
  --set image.pullSecrets[0]=cgr-pull-secret

About This Chart

This is a redistribution of the upstream falco-exporter chart. All upstream configuration options apply.

For full documentation, see: https://github.com/falcosecurity/charts/tree/master/charts/falco-exporter