Skip to content

falcon-kac resourcequota configurability #486

@cqwense

Description

@cqwense

currently the falcon-kac resourcequota is only configurable by the number of pods allowed matching the hard coded matching of

matchExpressions: - operator: In scopeName: PriorityClass values: - system-cluster-critical

if you're running falcon-kac in the same namespace as a daemonset ( falcon-system:falcon-sensor for example ) this creates an impossible to configure/achieve resourcequota that can never be relieved.

couple of suggestions:

  1. make the creation of the resourcequota itself toggle'able
  2. make the matchExpressions configurable via values

or 3) change the default matchExpressions match something less globally used than priorityclass

https://github.com/CrowdStrike/falcon-helm/blob/main/helm-charts/falcon-kac/templates/resourcequota.yaml

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions