add customtags

Signed-off-by: Thomas Labarussias <[email protected]>
falcosecurity · Feb 6, 2025 · 1134718 · 1134718
1 parent 966f414
commit 1134718
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 1 deletion.
diff --git a/charts/falcosidekick/CHANGELOG.md b/charts/falcosidekick/CHANGELOG.md
@@ -5,6 +5,10 @@ numbering uses [semantic versioning](http://semver.org).
 
 Before release 0.1.20, the helm chart can be found in `falcosidekick` [repository](https://github.com/falcosecurity/falcosidekick/tree/master/deploy/helm/falcosidekick).
 
+## 0.9.9
+
+- Add `customtags` setting
+
 ## 0.9.8
 
 - Ugrade to Falcosidekick 2.31.1 (fix last release)

diff --git a/charts/falcosidekick/Chart.yaml b/charts/falcosidekick/Chart.yaml
@@ -3,7 +3,7 @@ appVersion: 2.31.1
 description: Connect Falco to your ecosystem
 icon: https://raw.githubusercontent.com/falcosecurity/falcosidekick/master/imgs/falcosidekick_color.png
 name: falcosidekick
-version: 0.9.8
+version: 0.9.9
 keywords:
   - monitoring
   - security

diff --git a/charts/falcosidekick/README.md b/charts/falcosidekick/README.md
@@ -233,6 +233,7 @@ The following table lists the main configurable parameters of the Falcosidekick
 | config.cloudevents.extension | string | `""` | Extensions to add in the outbound Event, useful for routing |
 | config.cloudevents.minimumpriority | string | `""` | minimum priority of event to use this output, order is `emergency\|alert\|critical\|error\|warning\|notice\|informational\|debug or ""` |
 | config.customfields | string | `""` | a list of escaped comma separated custom fields to add to falco events, syntax is "key:value\,key:value" |
+| config.customtags | string | `""` | a list of escaped comma separated custom tags to add to falco events, syntax is "tag\,tag" |
 | config.datadog.apikey | string | `""` | Datadog API Key, if not `empty`, Datadog output is *enabled* |
 | config.datadog.host | string | `""` | Datadog host. Override if you are on the Datadog EU site. Defaults to american site with "<https://api.datadoghq.com>" |
 | config.datadog.minimumpriority | string | `""` | minimum priority of event to use this output, order is `emergency\|alert\|critical\|error\|warning\|notice\|informational\|debug or ""` |

diff --git a/charts/falcosidekick/templates/deployment.yaml b/charts/falcosidekick/templates/deployment.yaml
@@ -109,6 +109,8 @@ spec:
               value: {{ .Values.config.customfields | quote }}
             - name: TEMPLATEDFIELDS
               value: {{ .Values.config.templatedfields | quote }}
+            - name: CUSTOMTAGS
+              value: {{ .Values.config.customtags | quote }}
             - name: OUTPUTFIELDFORMAT
               value: {{ .Values.config.outputFieldFormat | quote }}
             - name: BRACKETREPLACER

diff --git a/charts/falcosidekick/values.yaml b/charts/falcosidekick/values.yaml
@@ -145,6 +145,8 @@ config:
   customfields: ""
   # -- a list of escaped comma separated Go templated fields to add to falco events, syntax is "key:template\,key:template"
   templatedfields: ""
+  # -- a list of escaped comma separated custom tags to add to falco events, syntax is "tag\,tag"
+  customtags: ""
   # -- if not empty, the brackets in keys of Output Fields are replaced
   bracketreplacer: ""
   # if not empty, allow to change the format of the output field. (example: "<timestamp>: <priority> <output> <custom_fields> <templated_fields>") (default: "<timestamp>: <priority> <output>")