FIX(falco): add NoExecute tolerations
- and enable Redis persistence - Add NoExecute tolerations for master/control-plane nodes to run Falco DaemonSet on all nodes - Enable Redis storage to persist index data across pod restarts
This commit is contained in:
@@ -142,7 +142,7 @@ falcosidekick:
|
||||
memory: 512Mi
|
||||
|
||||
redis:
|
||||
storageEnabled: false
|
||||
storageEnabled: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 10m
|
||||
@@ -172,8 +172,12 @@ nodeSelector: {}
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: node-role.kubernetes.io/master
|
||||
- effect: NoExecute
|
||||
key: node-role.kubernetes.io/master
|
||||
- effect: NoSchedule
|
||||
key: node-role.kubernetes.io/control-plane
|
||||
- effect: NoExecute
|
||||
key: node-role.kubernetes.io/control-plane
|
||||
|
||||
# Run as DaemonSet on all nodes
|
||||
daemonset:
|
||||
|
||||
Reference in New Issue
Block a user