(Optional) Installing Falco Kernel Modules on Hosts
After you upgrade the HPE Ezmeral Runtime Enterprise software, you can install the Falco Kernel Module (optional) on the operating system of each Kubernetes host.
Prerequisites
- You have upgraded the platform software.
- You have obtained the correct version of the Falco Kernel Module (see Falco Container Runtime Security)
About this task
This task is optional. After upgrading the platform, If you choose to install the Falco Kernel Module on Kubernetes hosts in an existing Kubernetes cluster, Hewlett Packard Enterprise recommends that you install the module on each Kubernetes host before you upgrade the Kubernetes add-ons.
This task is not required for hosts that are not running Kubernetes.
Procedure
-
Install the Falco Kernel Module on the operating system of each Kubernetes
host.
For instructions, see Falco Container Runtime Security.
-
Tag each host with the
falco: true
label.