From 89d600c343d971a527aec027e754a8b0992af83c Mon Sep 17 00:00:00 2001 From: Gabe Alford Date: Thu, 5 Oct 2023 16:39:47 -0600 Subject: [PATCH] feat: add Admission Controller docs --- docs/src/resources/container.md.tmpl | 2 -- 1 file changed, 2 deletions(-) diff --git a/docs/src/resources/container.md.tmpl b/docs/src/resources/container.md.tmpl index 2e9a69ee..47dd7e22 100644 --- a/docs/src/resources/container.md.tmpl +++ b/docs/src/resources/container.md.tmpl @@ -1,6 +1,5 @@ # Falcon Container Sensor - ## About Falcon Container Sensor The Falcon Container sensor for Linux extends runtime security to container workloads in Kubernetes clusters that don’t allow you to deploy the kernel-based Falcon sensor for Linux. The Falcon Container sensor runs as an unprivileged container in user space with no code running in the kernel of the worker node OS. This allows it to secure Kubernetes pods in clusters where it isn’t possible to deploy the kernel-based Falcon sensor for Linux on the worker node, as with AWS Fargate where organizations don’t have access to the kernel and where privileged containers are disallowed. The Falcon Container sensor can also secure container workloads on clusters where worker node security is managed separately. @@ -60,7 +59,6 @@ spec: | registry.tls.caCertificate | (optional) A string containing an optionally base64-encoded Certificate Authority Chain for self-signed TLS Registry Certificates | registry.tls.caCertificateConfigMap | (optional) The name of a ConfigMap containing CA Certificate Authority Chains under keys ending in ".tls" for self-signed TLS Registry Certificates (ignored when registry.tls.caCertificate is set) | registry.acr_name | (optional) Name of ACR for the Falcon Container push. Only applicable to Azure cloud. (`registry.type="acr"`) | -| registry.ecr_iam_role_arn | (optional) ARN of AWS IAM Role to be assigned to the Injector (only needed when injector runs on EKS Fargate) | | injector.serviceAccount.annotations | (optional) Annotations that should be added to the Service Account (e.g. for IAM role association) | | injector.listenPort | (optional) Override the default Injector Listen Port of 4433 | | injector.replicas | (optional) Override the default Injector Replica count of 2 |