diff --git a/.gitignore b/.gitignore index f7009cf4c..e958ba787 100644 --- a/.gitignore +++ b/.gitignore @@ -3,3 +3,4 @@ *.swp *.swo *~ +.vscode \ No newline at end of file diff --git a/charts/falcosidekick/CHANGELOG.md b/charts/falcosidekick/CHANGELOG.md index a1c79a7fa..d7b85f5fe 100644 --- a/charts/falcosidekick/CHANGELOG.md +++ b/charts/falcosidekick/CHANGELOG.md @@ -5,7 +5,12 @@ numbering uses [semantic versioning](http://semver.org). Before release 0.1.20, the helm chart can be found in `falcosidekick` [repository](https://github.com/falcosecurity/falcosidekick/tree/master/deploy/helm/falcosidekick). +## 0.8.5 + +- Fix an issue with the by default missing custom CA cert + ## 0.8.4 + - Fix falcosidekick chart ignoring custom service type for webui redis ## 0.8.3 diff --git a/charts/falcosidekick/Chart.yaml b/charts/falcosidekick/Chart.yaml index 9f3d776e0..1b18d1296 100644 --- a/charts/falcosidekick/Chart.yaml +++ b/charts/falcosidekick/Chart.yaml @@ -3,7 +3,7 @@ appVersion: 2.29.0 description: Connect Falco to your ecosystem icon: https://raw.githubusercontent.com/falcosecurity/falcosidekick/master/imgs/falcosidekick_color.png name: falcosidekick -version: 0.8.4 +version: 0.8.5 keywords: - monitoring - security diff --git a/charts/falcosidekick/README.md b/charts/falcosidekick/README.md index 9995cffb8..598d140c2 100644 --- a/charts/falcosidekick/README.md +++ b/charts/falcosidekick/README.md @@ -523,7 +523,7 @@ The following table lists the main configurable parameters of the Falcosidekick | config.timescaledb.password | string | `"postgres"` | Password to authenticate with TimescaleDB | | config.timescaledb.port | int | `5432` | TimescaleDB port (default: 5432) | | config.timescaledb.user | string | `"postgres"` | Username to authenticate with TimescaleDB | -| config.tlsclient.cacertfile | string | `"/etc/certs/client/ca.crt"` | CA certificate file for server certification on TLS connections, appended to the system CA pool if not empty | +| config.tlsclient.cacertfile | string | `""` | CA certificate file for server certification on TLS connections, appended to the system CA pool if not empty | | config.tlsserver.cacertfile | string | `"/etc/certs/server/ca.crt"` | CA certification file path for client certification if mutualtls is true | | config.tlsserver.cacrt | string | `""` | | | config.tlsserver.certfile | string | `"/etc/certs/server/server.crt"` | server certification file path for TLS Server | diff --git a/charts/falcosidekick/values.yaml b/charts/falcosidekick/values.yaml index 9bc987910..c148ee729 100644 --- a/charts/falcosidekick/values.yaml +++ b/charts/falcosidekick/values.yaml @@ -145,7 +145,7 @@ config: tlsclient: # -- CA certificate file for server certification on TLS connections, appended to the system CA pool if not empty - cacertfile: "/etc/certs/client/ca.crt" + cacertfile: "" tlsserver: # -- if true TLS server will be deployed instead of HTTP