26 lines
700 B
YAML
26 lines
700 B
YAML
apiVersion: instance.falcosecurity.dev/v1alpha1
|
|
kind: Component
|
|
metadata:
|
|
name: falcosidekick
|
|
namespace: falco
|
|
annotations:
|
|
# Deploy the event forwarder only when the alerting Secret is enabled.
|
|
argocd.argoproj.io/sync-wave: "2"
|
|
spec:
|
|
component:
|
|
type: falcosidekick
|
|
replicas: 1
|
|
podTemplateSpec:
|
|
spec:
|
|
containers:
|
|
- name: falcosidekick
|
|
env:
|
|
- name: SLACK_WEBHOOKURL
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: falco-alerting
|
|
key: webhook-url
|
|
# Keep low-priority events in Falco logs instead of Slack.
|
|
- name: SLACK_MINIMUMPRIORITY
|
|
value: warning
|