update(kubernetes): Deployment files

Signed-off-by: poiana <51138685+poiana@users.noreply.github.com>

kubernetes/falco/templates/configmap.yaml

@@ -4,7 +4,7 @@ metadata:
   name: falco
   namespace: default
   labels:
-    helm.sh/chart: falco-6.0.2
+    helm.sh/chart: falco-6.2.1
     app.kubernetes.io/name: falco
     app.kubernetes.io/instance: falco
     app.kubernetes.io/version: "0.41.3"
@@ -118,25 +118,28 @@ data:
     - init_config:
         engines:
           bpm:
-            enabled: false
+            enabled: true
           containerd:
             enabled: true
             sockets:
-            - /run/containerd/containerd.sock
+            - /run/host-containerd/containerd.sock
           cri:
             enabled: true
             sockets:
+            - /run/containerd/containerd.sock
             - /run/crio/crio.sock
+            - /run/k3s/containerd/containerd.sock
+            - /run/host-containerd/containerd.sock
           docker:
             enabled: true
             sockets:
             - /var/run/docker.sock
           libvirt_lxc:
-            enabled: false
+            enabled: true
           lxc:
-            enabled: false
+            enabled: true
           podman:
-            enabled: false
+            enabled: true
             sockets:
             - /run/podman/podman.sock
         hooks:

kubernetes/falco/templates/daemonset.yaml

@@ -4,7 +4,7 @@ metadata:
   name: falco
   namespace: default
   labels:
-    helm.sh/chart: falco-6.0.2
+    helm.sh/chart: falco-6.2.1
     app.kubernetes.io/name: falco
     app.kubernetes.io/instance: falco
     app.kubernetes.io/version: "0.41.3"
@@ -21,7 +21,7 @@ spec:
         app.kubernetes.io/name: falco
         app.kubernetes.io/instance: falco
       annotations:
-        checksum/config: 10a490066e1a9cf457f1e00daf6ebefe8eef9186f51f1c865cb2741276dbf290
+        checksum/config: 948adb2235f9c452256f8a116e5000835b63646b5f8a15ca4c138f50a15698f8
         checksum/rules: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
         checksum/certs: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
     spec:
@@ -78,11 +78,17 @@ spec:
               port: 8765
           volumeMounts:
             - mountPath: /host/var/run/docker.sock
-              name: docker-socket
+              name: container-engine-socket-0
-            - mountPath: /host/run/crio/crio.sock
+            - mountPath: /host/run/podman/podman.sock
-              name: crio-socket
+              name: container-engine-socket-1
+            - mountPath: /host/run/host-containerd/containerd.sock
+              name: container-engine-socket-2
             - mountPath: /host/run/containerd/containerd.sock
-              name: containerd-socket
+              name: container-engine-socket-3
+            - mountPath: /host/run/crio/crio.sock
+              name: container-engine-socket-4
+            - mountPath: /host/run/k3s/containerd/containerd.sock
+              name: container-engine-socket-5
             - mountPath: /etc/falco
               name: rulesfiles-install-dir
             - mountPath: /usr/share/falco/plugins
@@ -174,13 +180,22 @@ spec:
       volumes:
         - hostPath:
             path: /var/run/docker.sock
-          name: docker-socket
+          name: container-engine-socket-0
         - hostPath:
-            path: /run/crio/crio.sock
+            path: /run/podman/podman.sock
-          name: crio-socket
+          name: container-engine-socket-1
+        - hostPath:
+            path: /run/host-containerd/containerd.sock
+          name: container-engine-socket-2
         - hostPath:
             path: /run/containerd/containerd.sock
-          name: containerd-socket
+          name: container-engine-socket-3
+        - hostPath:
+            path: /run/crio/crio.sock
+          name: container-engine-socket-4
+        - hostPath:
+            path: /run/k3s/containerd/containerd.sock
+          name: container-engine-socket-5
         - name: specialized-falco-configs
           emptyDir: {}
         - name: plugins-install-dir

kubernetes/falco/templates/falcoctl-configmap.yaml

@@ -4,7 +4,7 @@ metadata:
   name: falco-falcoctl
   namespace: default
   labels:
-    helm.sh/chart: falco-6.0.2
+    helm.sh/chart: falco-6.2.1
     app.kubernetes.io/name: falco
     app.kubernetes.io/instance: falco
     app.kubernetes.io/version: "0.41.3"
@@ -26,7 +26,7 @@ data:
         pluginsDir: /plugins
         refs:
         - falco-rules:4
-        - ghcr.io/falcosecurity/plugins/plugin/container:0.3.1
+        - ghcr.io/falcosecurity/plugins/plugin/container:0.3.3
         resolveDeps: true
         rulesfilesDir: /rulesfiles
     indexes:

kubernetes/falco/templates/role.yaml

@@ -3,7 +3,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: falco
   labels:
-    helm.sh/chart: falco-6.0.2
+    helm.sh/chart: falco-6.2.1
     app.kubernetes.io/name: falco
     app.kubernetes.io/instance: falco
     app.kubernetes.io/version: "0.41.3"

kubernetes/falco/templates/roleBinding.yaml

@@ -3,7 +3,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: falco
   labels:
-    helm.sh/chart: falco-6.0.2
+    helm.sh/chart: falco-6.2.1
     app.kubernetes.io/name: falco
     app.kubernetes.io/instance: falco
     app.kubernetes.io/version: "0.41.3"

kubernetes/falco/templates/serviceaccount.yaml

@@ -4,7 +4,7 @@ metadata:
   name: falco
   namespace: default
   labels:
-    helm.sh/chart: falco-6.0.2
+    helm.sh/chart: falco-6.2.1
     app.kubernetes.io/name: falco
     app.kubernetes.io/instance: falco
     app.kubernetes.io/version: "0.41.3"