From 31065465ec538b6cece0ee5c6fa704d34f97d9b0 Mon Sep 17 00:00:00 2001 From: Kornilios Kourtis Date: Tue, 24 Oct 2023 14:17:44 +0200 Subject: [PATCH] helm: enable policyfilter by default Policyfilter is the underlying mechanism for namespaced policies and pod label filters. Enable it by default on helm, so that it is on by default on k8s environments. Because this feature targets only k8s environments (at leat for now), the default value on the agent, we do not change the default value of the agent flag. Signed-off-by: Kornilios Kourtis --- install/kubernetes/values.yaml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/install/kubernetes/values.yaml b/install/kubernetes/values.yaml index d0e41eac174..46ed3d5b8d6 100644 --- a/install/kubernetes/values.yaml +++ b/install/kubernetes/values.yaml @@ -144,9 +144,8 @@ tetragon: address: "localhost" # -- The port at which to expose gops. port: 8118 - # Enable policy filter. This is required for K8s namespace filtering. - # NB: this is currently a beta feature - enablePolicyFilter: false + # Enable policy filter. This is required for K8s namespace filtering and pod label filters. + enablePolicyFilter: True # Enable policy filter debug messages. enablePolicyFilterDebug: false # Enable latency monitoring in message handling