* add aws.config.useirsa to fix the behavior with AWS IRSA

* add service_monitor + prometheus_rules
* fix error with alertmanager custom map and threshold

Signed-off-by: Thomas Labarussias <[email protected]>

charts/falcosidekick/CHANGELOG.md

@@ -5,6 +5,13 @@ numbering uses [semantic versioning](http://semver.org).
 
 Before release 0.1.20, the helm chart can be found in `falcosidekick` [repository](https://github.com/falcosecurity/falcosidekick/tree/master/deploy/helm/falcosidekick).
 
+## 0.7.6
+
+* Fix the behavior with the `AWS IRSA` with a new value `aws.config.useirsa`
+* Add a section in the README to describe how to use a subpath for `Falcosidekick-ui` ingress
+* Add a `ServiceMonitor` for prometheus-operator
+* Add a `PrometheusRule` for prometheus-operator
+
 ## 0.7.5
 
 * noop change just to test the ci

charts/falcosidekick/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: 2.28.0
 description: Connect Falco to your ecosystem
 icon: https://raw.githubusercontent.com/falcosecurity/falcosidekick/master/imgs/falcosidekick_color.png
 name: falcosidekick
-version: 0.7.5
+version: 0.7.6
 keywords:
   - monitoring
   - security

charts/falcosidekick/README.gotmpl

@@ -17,99 +17,106 @@ It works as a single endpoint for as many as you want `Falco` instances :
 
 `Falcosidekick` manages a large variety of outputs with different purposes.
 
+> **Note**
+Follow the links to get the configuration of each output.
+
 ### Chat
 
-- [**Slack**](https://slack.com)
-- [**Rocketchat**](https://rocket.chat/)
-- [**Mattermost**](https://mattermost.com/)
-- [**Teams**](https://products.office.com/en-us/microsoft-teams/group-chat-software)
-- [**Discord**](https://www.discord.com/)
-- [**Google Chat**](https://workspace.google.com/products/chat/)
-- [**Zoho Cliq**](https://www.zoho.com/cliq/)
-- [**Telegram**](https://telegram.org)
+- [**Slack**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/slack.md)
+- [**Rocketchat**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/rocketchat.md)
+- [**Mattermost**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/mattermost.md)
+- [**Teams**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/teams.md)
+- [**Discord**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/discord.md)
+- [**Google Chat**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/googlechat.md)
+- [**Zoho Cliq**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/cliq.md)
+- [**Telegram**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/telegram.md)
 
 ### Metrics / Observability
 
-- [**Datadog**](https://www.datadoghq.com/)
-- [**Influxdb**](https://www.influxdata.com/products/influxdb-overview/)
-- [**StatsD**](https://github.com/statsd/statsd) (for monitoring of `falcosidekick`)
-- [**DogStatsD**](https://docs.datadoghq.com/developers/dogstatsd/?tab=go) (for monitoring of `falcosidekick`)
-- [**Prometheus**](https://prometheus.io/) (for both events and monitoring of `falcosidekick`)
-- [**Wavefront**](https://www.wavefront.com)
-- [**Spyderbat**](https://www.spyderbat.com)
-- [**TimescaleDB**](https://www.timescale.com/)
-- [**Dynatrace**](https://www.dynatrace.com/)
+- [**Datadog**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/datadog.md)
+- [**Influxdb**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/influxdb.md)
+- [**StatsD**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/statsd.md) (for monitoring of `falcosidekick`)
+- [**DogStatsD**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/dogstatsd.md) (for monitoring of `falcosidekick`)
+- [**Prometheus**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/prometheus.md) (for both events and monitoring of `falcosidekick`)
+- [**Wavefront**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/wavefront.md)
+- [**Spyderbat**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/spyderbat.md)
+- [**TimescaleDB**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/timescaledb.md)
+- [**Dynatrace**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/dynatrace.md)
 
 ### Alerting
 
-- [**AlertManager**](https://prometheus.io/docs/alerting/alertmanager/)
-- [**Opsgenie**](https://www.opsgenie.com/)
-- [**PagerDuty**](https://pagerduty.com/)
-- [**Grafana OnCall**](https://grafana.com/products/oncall/)
+- [**AlertManager**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/alertmanager.md)
+- [**Opsgenie**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/opsgenie.md)
+- [**PagerDuty**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/pagerduty.md)
+- [**Grafana OnCall**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/grafana_oncall.md)
 
 ### Logs
 
-- [**Elasticsearch**](https://www.elastic.co/)
-- [**Loki**](https://grafana.com/oss/loki)
-- [**AWS CloudWatchLogs**](https://aws.amazon.com/cloudwatch/features/)
-- [**Grafana**](https://grafana.com/) (annotations)
-- **Syslog**
-- [**Zincsearch**](https://docs.zincsearch.com/)
-- [**OpenObserve**](https://openobserve.ai)
+- [**Elasticsearch**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/elasticsearch.md)
+- [**Loki**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/loki.md)
+- [**AWS CloudWatchLogs**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/aws_cloudwatch_logs.md)
+- [**Grafana**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/grafana.md)
+- [**Syslog**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/syslog.md)
+- [**Zincsearch**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs//zincsearch.md)
+- [**OpenObserve**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/openobserve.md)
 
 ### Object Storage
 
-- [**AWS S3**](https://aws.amazon.com/s3/features/)
-- [**GCP Storage**](https://cloud.google.com/storage)
-- [**Yandex S3 Storage**](https://cloud.yandex.com/en-ru/services/storage)
+- [**AWS S3**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/aws_s3.md)
+- [**GCP Storage**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/gcp_storage.md)
+- [**Yandex S3 Storage**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/yandex_s3.md)
 
 ### FaaS / Serverless
 
-- [**AWS Lambda**](https://aws.amazon.com/lambda/features/)
-- [**GCP Cloud Run**](https://cloud.google.com/run)
-- [**GCP Cloud Functions**](https://cloud.google.com/functions)
-- [**Fission**](https://fission.io)
-- [**KNative (CloudEvents)**](https://knative.dev)
-- [**Kubeless**](https://kubeless.io/)
-- [**OpenFaaS**](https://www.openfaas.com)
-- [**Tekton**](https://tekton.dev)
+- [**AWS Lambda**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/aws_lambda.md)
+- [**GCP Cloud Run**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/gcp_cloud_run.md)
+- [**GCP Cloud Functions**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/gcp_cloud_functions.md)
+- [**Fission**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/fission.md)
+- [**KNative (CloudEvents)**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/cloudevents.md)
+- [**Kubeless**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/kubeless.md)
+- [**OpenFaaS**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/openfaas.md)
+- [**Tekton**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/tekton.md)
 
 ### Message queue / Streaming
 
-- [**NATS**](https://nats.io/)
-- [**STAN (NATS Streaming)**](https://docs.nats.io/nats-streaming-concepts/intro)
-- [**AWS SQS**](https://aws.amazon.com/sqs/features/)
-- [**AWS SNS**](https://aws.amazon.com/sns/features/)
-- [**AWS Kinesis**](https://aws.amazon.com/kinesis/)
-- [**GCP PubSub**](https://cloud.google.com/pubsub)
-- [**Apache Kafka**](https://kafka.apache.org/)
-- [**Kafka Rest Proxy**](https://docs.confluent.io/platform/current/kafka-rest/index.html)
-- [**RabbitMQ**](https://www.rabbitmq.com/)
-- [**Azure Event Hubs**](https://azure.microsoft.com/en-in/services/event-hubs/)
-- [**Yandex Data Streams**](https://cloud.yandex.com/en/docs/data-streams/)
-- [**MQTT**](https://mqtt.org/)
-- [**Gotify**](https://gotify.net/)
+- [**NATS**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/nats.md)
+- [**STAN (NATS Streaming)**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/stan.md)
+- [**AWS SQS**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/aws_sqs.md)
+- [**AWS SNS**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/aws_sns.md)
+- [**AWS Kinesis**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/aws_kinesis.md)
+- [**GCP PubSub**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/gcp_pub_sub.md)
+- [**Apache Kafka**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/kafka.md)
+- [**Kafka Rest Proxy**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/kafkarest.md)
+- [**RabbitMQ**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/rabbitmq.md)
+- [**Azure Event Hubs**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/azure_event_hub.md)
+- [**Yandex Data Streams**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/yandex_datastreams.md)
+- [**MQTT**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/mqtt.md)
+- [**Gotify**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/gotify.md)
 
 ### Email
 
-- **SMTP**
+- [**SMTP**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/smtp.md)
+
+### Database
+
+- [**Redis**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/redis.md)
 
 ### Web
 
-- **Webhook**
-- [**Node-RED**](https://nodered.org/)
-- [**WebUI**](https://github.com/falcosecurity/falcosidekick-ui) (a Web UI for displaying latest events in real time)
+- [**Webhook**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/webhook.md)
+- [**Node-RED**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/nodered.md)
+- [**WebUI (Falcosidekick UI)**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/falcosidekick-ui.md)
 
 ### SIEM
 
-- [**AWS Security Lake**](https://aws.amazon.com/security-lake/)
+- [**AWS Security Lake**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/aws_security_lake.md)
 
 ### Workflow
 
-- [**n8n**](https://n8n.io/)
+- [**n8n**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/n8n.md)
 
 ### Other
-- [**Policy Report**](https://github.com/kubernetes-sigs/wg-policy-prototypes/tree/master/policy-report/falco-adapter)
+- [**Policy Report**](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/policy-reporter.md)
 
 ## Adding `falcosecurity` repository
 
@@ -170,3 +177,11 @@ Specify each parameter using the `--set key=value[,key=value]` argument to `helm
 
 A `prometheus` endpoint can be scrapped at `/metrics`.
 
+## Access Falcosidekick UI through an Ingress  and a subpath
+
+You may want to access the `WebUI (Falcosidekick UI)`](https://github.com/falcosecurity/falcosidekick/blob/master/docs/outputs/falcosidekick-ui.md) dashboard not from `/` but from `/subpath` and use an Ingress, here's an example of annotations to add to the Ingress for `nginx-ingress controller`:
+
+```yaml
+nginx.ingress.kubernetes.io/rewrite-target: /$2
+nginx.ingress.kubernetes.io/use-regex: "true"
+```