Merge pull request #324 from jsullivan-CS/be-main

Adding backend support in Node/DaemonSet
CrowdStrike · Dec 8, 2022 · 1ed2468 · 1ed2468
2 parents acd9130 + 155a6ef
commit 1ed2468
Show file tree

Hide file tree

Showing 5 changed files with 29 additions and 0 deletions.
diff --git a/apis/falcon/v1alpha1/falconnodesensor_types.go b/apis/falcon/v1alpha1/falconnodesensor_types.go
@@ -81,6 +81,11 @@ type FalconNodeSensorConfig struct {
 	// +kubebuilder:default=false
 	// +operator-sdk:csv:customresourcedefinitions:type=spec,order=7
 	NodeCleanup *bool `json:"disableCleanup,omitempty"`
+	// Sets the backend to be used by the DaemonSet Sensor.
+	// +kubebuilder:default=kernel
+	// +kubebuilder:validation:Enum=kernel;bpf
+	// +operator-sdk-csv:customresourcedefinitions:type=spec,order=8
+	Backend string `json:"backend,omitempty"`
 
 	// Version of the sensor to be installed. The latest version will be selected when this version specifier is missing.
 	Version *string `json:"version,omitempty"`

diff --git a/bundle/manifests/falcon.crowdstrike.com_falconnodesensors.yaml b/bundle/manifests/falcon.crowdstrike.com_falconnodesensors.yaml
@@ -128,6 +128,13 @@ spec:
               node:
                 description: Various configuration for DaemonSet Deployment
                 properties:
+                  backend:
+                    default: kernel
+                    description: Sets the backend to be used by the DaemonSet Sensor.
+                    enum:
+                    - kernel
+                    - bpf
+                    type: string
                   disableCleanup:
                     default: false
                     description: Disables the cleanup of the sensor through DaemonSet

diff --git a/config/crd/bases/falcon.crowdstrike.com_falconnodesensors.yaml b/config/crd/bases/falcon.crowdstrike.com_falconnodesensors.yaml
@@ -129,6 +129,13 @@ spec:
               node:
                 description: Various configuration for DaemonSet Deployment
                 properties:
+                  backend:
+                    default: kernel
+                    description: Sets the backend to be used by the DaemonSet Sensor.
+                    enum:
+                    - kernel
+                    - bpf
+                    type: string
                   disableCleanup:
                     default: false
                     description: Disables the cleanup of the sensor through DaemonSet

diff --git a/deploy/falcon-operator.yaml b/deploy/falcon-operator.yaml
@@ -2053,6 +2053,13 @@ spec:
               node:
                 description: Various configuration for DaemonSet Deployment
                 properties:
+                  backend:
+                    default: kernel
+                    description: Sets the backend to be used by the DaemonSet Sensor.
+                    enum:
+                    - kernel
+                    - bpf
+                    type: string
                   disableCleanup:
                     default: false
                     description: Disables the cleanup of the sensor through DaemonSet

diff --git a/pkg/node/config_cache.go b/pkg/node/config_cache.go
@@ -52,6 +52,9 @@ func (cc *ConfigCache) SensorEnvVars() map[string]string {
 	if cc.cid != "" {
 		sensorConfig["FALCONCTL_OPT_CID"] = cc.cid
 	}
+	if cc.nodesensor.Spec.Node.Backend != "" {
+		sensorConfig["FALCONCTL_OPT_BACKEND"] = cc.nodesensor.Spec.Node.Backend
+	}
 	return sensorConfig
 }