Merge pull request #352 from JonBruchim/main

cdp: set ClusterFirstWithHostNet for node sensor

Author: redhatrises

helm-charts/falcon-sensor/templates/clusterrole.yaml

@@ -8,19 +8,19 @@ metadata:
     app.kubernetes.io/name: {{ include "falcon-sensor.name" . }}
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/managed-by: {{ .Release.Service }}
-    {{ if .Values.container.enabled }}
+    {{- if .Values.container.enabled }}
     app.kubernetes.io/component: "container_sensor"
     {{ else if .Values.node.enabled }}
     app.kubernetes.io/component: "kernel_sensor"
-    {{ end }}
+    {{ end -}}
     crowdstrike.com/provider: crowdstrike
     helm.sh/chart: {{ include "falcon-sensor.chart" . }}
 rules:
 - apiGroups:
   - ""
   resources:
   - secrets
-  {{- if and .Values.node.enabled }}
+  {{- if .Values.node.enabled }}
   - pods
   - services
   - nodes

helm-charts/falcon-sensor/templates/clusterrolebinding.yaml

@@ -8,11 +8,11 @@ metadata:
     app.kubernetes.io/name: {{ include "falcon-sensor.name" . }}
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/managed-by: {{ .Release.Service }}
-    {{ if .Values.container.enabled }}
+    {{- if .Values.container.enabled }}
     app.kubernetes.io/component: "container_sensor"
     {{ else if .Values.node.enabled }}
     app.kubernetes.io/component: "kernel_sensor"
-    {{ end }}
+    {{ end -}}
     crowdstrike.com/provider: crowdstrike
     helm.sh/chart: {{ include "falcon-sensor.chart" . }}
 subjects:

helm-charts/falcon-sensor/templates/configmap.yaml

@@ -8,7 +8,11 @@ metadata:
     app.kubernetes.io/name: {{ include "falcon-sensor.name" . }}
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/managed-by: {{ .Release.Service }}
+    {{- if .Values.container.enabled }}
     app.kubernetes.io/component: "container_sensor"
+    {{ else if .Values.node.enabled }}
+    app.kubernetes.io/component: "kernel_sensor"
+    {{ end -}}
     crowdstrike.com/provider: crowdstrike
     helm.sh/chart: {{ include "falcon-sensor.chart" . }}
 data:

helm-charts/falcon-sensor/templates/daemonset.yaml

@@ -180,6 +180,7 @@ spec:
       priorityClassName: {{ include "falcon-sensor.priorityClassName" . }}
     {{- end }}
       hostNetwork: true
+      dnsPolicy: ClusterFirstWithHostNet
       hostPID: true
       hostIPC: true
 {{- end }}