Skip to content

Commit

Permalink
feat: add Admission Controller docs
Browse files Browse the repository at this point in the history
  • Loading branch information
redhatrises committed Oct 5, 2023
1 parent 265b122 commit 89d600c
Showing 1 changed file with 0 additions and 2 deletions.
2 changes: 0 additions & 2 deletions docs/src/resources/container.md.tmpl
Original file line number Diff line number Diff line change
@@ -1,6 +1,5 @@
# Falcon Container Sensor


## About Falcon Container Sensor
The Falcon Container sensor for Linux extends runtime security to container workloads in Kubernetes clusters that don’t allow you to deploy the kernel-based Falcon sensor for Linux. The Falcon Container sensor runs as an unprivileged container in user space with no code running in the kernel of the worker node OS. This allows it to secure Kubernetes pods in clusters where it isn’t possible to deploy the kernel-based Falcon sensor for Linux on the worker node, as with AWS Fargate where organizations don’t have access to the kernel and where privileged containers are disallowed. The Falcon Container sensor can also secure container workloads on clusters where worker node security is managed separately.

Expand Down Expand Up @@ -60,7 +59,6 @@ spec:
| registry.tls.caCertificate | (optional) A string containing an optionally base64-encoded Certificate Authority Chain for self-signed TLS Registry Certificates
| registry.tls.caCertificateConfigMap | (optional) The name of a ConfigMap containing CA Certificate Authority Chains under keys ending in ".tls" for self-signed TLS Registry Certificates (ignored when registry.tls.caCertificate is set)
| registry.acr_name | (optional) Name of ACR for the Falcon Container push. Only applicable to Azure cloud. (`registry.type="acr"`) |
| registry.ecr_iam_role_arn | (optional) ARN of AWS IAM Role to be assigned to the Injector (only needed when injector runs on EKS Fargate) |
| injector.serviceAccount.annotations | (optional) Annotations that should be added to the Service Account (e.g. for IAM role association) |
| injector.listenPort | (optional) Override the default Injector Listen Port of 4433 |
| injector.replicas | (optional) Override the default Injector Replica count of 2 |
Expand Down

0 comments on commit 89d600c

Please sign in to comment.