(Optional) Installing Falco Kernel Modules on Hosts

After you upgrade the HPE Ezmeral Runtime Enterprise software, you can install the Falco Kernel Module (optional) on the operating system of each Kubernetes host.

Prerequisites

About this task

This task is optional. After upgrading the platform, If you choose to install the Falco Kernel Module on Kubernetes hosts in an existing Kubernetes cluster, Hewlett Packard Enterprise recommends that you install the module on each Kubernetes host before you upgrade the Kubernetes add-ons.

This task is not required for hosts that are not running Kubernetes.

Procedure

  1. Install the Falco Kernel Module on the operating system of each Kubernetes host.

    For instructions, see Falco Container Runtime Security.

  2. Tag each host with the falco: true label.