From feb7091dd8f08cf0950274be7adb9af979b69b7a Mon Sep 17 00:00:00 2001 From: Aldo Lacuku Date: Fri, 12 Jan 2024 12:44:28 +0100 Subject: [PATCH] update(falco): disable k8s-metacollector by default Signed-off-by: Aldo Lacuku --- charts/falco/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/falco/values.yaml b/charts/falco/values.yaml index 4daa8257c..c755dd9c9 100644 --- a/charts/falco/values.yaml +++ b/charts/falco/values.yaml @@ -277,7 +277,7 @@ collectors: # https://github.com/falcosecurity/charts/tree/master/charts/k8s-metacollector # When this option is disabled, Falco falls back to the container annotations to grab the metadata. # In such a case, only the ID, name, namespace, labels of the pod will be available. - enabled: true + enabled: false # --pluginRef is the OCI reference for the k8smeta plugin. It could be a full reference such as: # "ghcr.io/falcosecurity/plugins/plugin/k8smeta:0.1.0". Or just name + tag: k8smeta:0.1.0. pluginRef: "ghcr.io/falcosecurity/plugins/plugin/k8smeta:0.1.0"