diff --git a/charts/falcosidekick/CHANGELOG.md b/charts/falcosidekick/CHANGELOG.md index 51974fdfa..fd3c27791 100644 --- a/charts/falcosidekick/CHANGELOG.md +++ b/charts/falcosidekick/CHANGELOG.md @@ -5,6 +5,10 @@ numbering uses [semantic versioning](http://semver.org). Before release 0.1.20, the helm chart can be found in `falcosidekick` [repository](https://github.com/falcosecurity/falcosidekick/tree/master/deploy/helm/falcosidekick). +## 0.9.0 + +- Add missing Elasticsearch settings (enablecompression,maxconcurrentrequests, pipeline) + ## 0.8.7 - Fix securityContext for webui initContainer diff --git a/charts/falcosidekick/Chart.yaml b/charts/falcosidekick/Chart.yaml index 1d127866f..a3ce6d1ed 100644 --- a/charts/falcosidekick/Chart.yaml +++ b/charts/falcosidekick/Chart.yaml @@ -3,7 +3,7 @@ appVersion: 2.29.0 description: Connect Falco to your ecosystem icon: https://raw.githubusercontent.com/falcosecurity/falcosidekick/master/imgs/falcosidekick_color.png name: falcosidekick -version: 0.8.7 +version: 0.9.0 keywords: - monitoring - security diff --git a/charts/falcosidekick/README.md b/charts/falcosidekick/README.md index d39c7a21d..c2694b392 100644 --- a/charts/falcosidekick/README.md +++ b/charts/falcosidekick/README.md @@ -250,14 +250,17 @@ The following table lists the main configurable parameters of the Falcosidekick | config.elasticsearch.checkcert | bool | `true` | check if ssl certificate of the output is valid | | config.elasticsearch.createindextemplate | bool | `false` | Create an index template (default: false) | | config.elasticsearch.customheaders | string | `""` | a list of comma separated custom headers to add, syntax is "key:value,key:value" | +| config.elasticsearch.enablecompression | bool | `false` | Enable gzip compression of the request (default: false) | | config.elasticsearch.flattenfields | bool | `false` | Replace . by _ to avoid mapping conflicts, force to true if createindextemplate==true (default: false) | | config.elasticsearch.hostport | string | `""` | Elasticsearch , if not `empty`, Elasticsearch is *enabled* | | config.elasticsearch.index | string | `"falco"` | Elasticsearch index | +| config.elasticsearch.maxconcurrentrequests | int | `1` | Maximum number of concurrent requests to Elasticsearch (default: 1) | | config.elasticsearch.minimumpriority | string | `""` | minimum priority of event to use this output, order is `emergency\|alert\|critical\|error\|warning\|notice\|informational\|debug or ""` | | config.elasticsearch.mutualtls | bool | `false` | if true, checkcert flag will be ignored (server cert will always be checked) | | config.elasticsearch.numberofreplicas | int | `3` | Number of replicas set by the index template (default: 3) | | config.elasticsearch.numberofshards | int | `3` | Number of shards set by the index template (default: 3) | | config.elasticsearch.password | string | `""` | use this password to authenticate to Elasticsearch if the password is not empty | +| config.elasticsearch.pipeline | string | `""` | Elasticsearch ingest pipeline | | config.elasticsearch.suffix | string | `"daily"` | | | config.elasticsearch.type | string | `"_doc"` | Elasticsearch document type | | config.elasticsearch.username | string | `""` | use this username to authenticate to Elasticsearch if the username is not empty | diff --git a/charts/falcosidekick/templates/secrets.yaml b/charts/falcosidekick/templates/secrets.yaml index 1335ff784..aa18b81d8 100644 --- a/charts/falcosidekick/templates/secrets.yaml +++ b/charts/falcosidekick/templates/secrets.yaml @@ -190,6 +190,9 @@ data: ELASTICSEARCH_NUMBEROFSHARDS: "{{ .Values.config.elasticsearch.numberofshards | toString | b64enc }}" ELASTICSEARCH_NUMBEROFREPLICAS: "{{ .Values.config.elasticsearch.numberofreplicas | toString | b64enc }}" ELASTICSEARCH_CUSTOMHEADERS: "{{ .Values.config.elasticsearch.customheaders | b64enc }}" + ELASTICSEARCH_PIPELINE: "{{ .Values.config.elasticsearch.pipeline | b64enc }}" + ELASTICSEARCH_MAXCONCURRENTREQUESTS: "{{ .Values.config.elasticsearch.maxconcurrentrequests | toString | b64enc }}" + ELASTICSEARCH_ENABLECOMPRESSION: "{{ .Values.config.elasticsearch.enablecompression | printf "%t" | b64enc }}" # Loki Output LOKI_HOSTPORT: "{{ .Values.config.loki.hostport | b64enc }}" diff --git a/charts/falcosidekick/values.yaml b/charts/falcosidekick/values.yaml index 9ee46da42..eafa3820d 100644 --- a/charts/falcosidekick/values.yaml +++ b/charts/falcosidekick/values.yaml @@ -298,6 +298,12 @@ config: checkcert: true # -- minimum priority of event to use this output, order is `emergency\|alert\|critical\|error\|warning\|notice\|informational\|debug or ""` minimumpriority: "" + # -- Optional ingest pipeline name. Documentation: https://www.elastic.co/guide/en/elasticsearch/reference/current/ingest.html + pipeline: "" + # -- Max number of concurrent requests + maxconcurrentrequests: 1 + # -- Enables gzip compression + enablecompression: false influxdb: # -- Influxdb , if not `empty`, Influxdb is *enabled*