Deploying Falco
We have included a script to deploy Falco, called falco-install.sh
, in the GitHub repository in the chapter12
folder.
The two most popular methods of deploying Falco to a Kubernetes cluster are using the official Helm chart or a DaemonSet manifest from the Falco repo. For the purposes of this module, we will deploy Falco using a modified DaemonSet installation from the book's GitHub repository.
To deploy Falco using the included script, execute the script from within the chapter12
folder by executing ./install-falco.sh
. We have also included a script called delete-falco.sh
in the same directory that will remove Falco from the cluster.
The steps that the script performs are detailed in the following list and will be explained in additional detail in this section.
The script executes the following tasks in two sections:
In Section 1, it creates a Falco probe and performs the following steps:
- Installs Go using
apt
- Pulls Falco's
driverkit...