chore(falco): move shared-pipe to tmp

Signed-off-by: Leonardo Grasso <[email protected]>
falcosecurity · Aug 25, 2020 · b38503c · b38503c
1 parent a581407
commit b38503c
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 13 deletions.
diff --git a/falco/templates/configmap.yaml b/falco/templates/configmap.yaml
@@ -122,7 +122,7 @@ data:
     file_output:
       enabled: true
       keep_alive: true
-      filename: /var/run/falco/nats
+      filename: /tmp/shared-pipe/nats
     {{- else }}
     file_output:
       enabled: {{ .Values.falco.fileOutput.enabled }}

diff --git a/falco/templates/daemonset.yaml b/falco/templates/daemonset.yaml
@@ -128,7 +128,7 @@ spec:
               name: rules-volume
             {{- end }}
             {{- if (or .Values.integrations.natsOutput.enabled .Values.integrations.snsOutput.enabled .Values.integrations.pubsubOutput.enabled) }}
-            - mountPath: /var/run/falco/
+            - mountPath: /tmp/shared-pipe/
               name: shared-pipe
               readOnly: false
             {{- end }}
@@ -146,18 +146,18 @@ spec:
         - name: {{ .Chart.Name }}-nats
           image: sysdig/falco-nats:latest
           imagePullPolicy: Always
-          args: [ "/bin/falco-nats", "-s", {{ .Values.integrations.natsOutput.natsUrl | quote }}]
+          args: [ "/bin/falco-nats", "-s", {{ .Values.integrations.natsOutput.natsUrl | quote }}, "-f", "/tmp/shared-pipe/nats"]
           volumeMounts:
-            - mountPath: /var/run/falco/
+            - mountPath: /tmp/shared-pipe/
               name: shared-pipe
       {{- end }}
       {{- if .Values.integrations.snsOutput.enabled }}
         - name: {{ .Chart.Name }}-sns
           image: sysdig/falco-sns:latest
           imagePullPolicy: Always
-          args: [ "/bin/falco-sns", "-t", {{ .Values.integrations.snsOutput.topic | quote }}]
+          args: [ "/bin/falco-sns", "-t", {{ .Values.integrations.snsOutput.topic | quote }}, "-f", "/tmp/shared-pipe/nats"]
           volumeMounts:
-            - mountPath: /var/run/falco/
+            - mountPath: /tmp/shared-pipe/
               name: shared-pipe
           env:
             - name: AWS_ACCESS_KEY_ID
@@ -180,9 +180,9 @@ spec:
         - name: {{ .Chart.Name }}-pubsub
           image: sysdiglabs/falco-pubsub:latest
           imagePullPolicy: Always
-          args: [ "/bin/falco-pubsub", "-t", {{ .Values.integrations.pubsubOutput.topic | quote }}]
+          args: [ "/bin/falco-pubsub", "-t", {{ .Values.integrations.pubsubOutput.topic | quote }}, "-f", "/tmp/shared-pipe/nats"]
           volumeMounts:
-            - mountPath: /var/run/falco/
+            - mountPath: /tmp/shared-pipe/
               name: shared-pipe
           env:
             - name: GOOGLE_PROJECT_ID
@@ -200,9 +200,9 @@ spec:
       initContainers:
           - name: init-pipe
             image: busybox
-            command: ['mkfifo','/var/run/falco/nats']
+            command: ['mkfifo','/tmp/shared-pipe/nats']
             volumeMounts:
-            - mountPath: /var/run/falco/
+            - mountPath: /tmp/shared-pipe/
               name: shared-pipe
               readOnly: false
       {{- end }}

diff --git a/falco/values.yaml b/falco/values.yaml
@@ -299,7 +299,7 @@ integrations:
   # * file_output:
   #     enabled: true
   #     keep_alive: true
-  #     filename: /var/run/falco/nats
+  #     filename: /tmp/shared-pipe/nats
   natsOutput:
     enabled: false
     natsUrl: "nats://nats.nats-io.svc.cluster.local:4222"
@@ -310,7 +310,7 @@ integrations:
   # * file_output:
   #     enabled: true
   #     keep_alive: true
-  #     filename: /var/run/falco/nats
+  #     filename: /tmp/shared-pipe/nats
   snsOutput:
     enabled: false
     topic: ""
@@ -326,7 +326,7 @@ integrations:
   # * file_output:
   #     enabled: true
   #     keep_alive: true
-  #     filename: /var/run/falco/nats
+  #     filename: /tmp/shared-pipe/nats
   pubsubOutput:
     enabled: false
     topic: ""