Update for falco

tasks/cluster_kubeadm.yml

@@ -136,6 +136,7 @@
     mode: 0644
   with_items:
     - "systemd/system/kubelet.service.d/0-kubelet-extra-args.conf"
+    - "systemd/system/kubelet.service.d/11-cgroups.conf"
     - "sysconfig/kubelet"
   when:
     - ansible_service_mgr == "systemd"

templates/etc/kubernetes/audit-webhook-kubeconfig.j2

@@ -1,9 +1,9 @@
 apiVersion: v1
 kind: Config
 clusters:
-- cluster:
-    server: http://<ip_of_falco>:8765/k8s_audit
-  name: falco
+- name: falco
+  cluster:
+    server: http://$FALCO_SERVICE_CLUSTERIP:8765/k8s-audit
 contexts:
 - context:
     cluster: falco

templates/kubeadm-config.yaml.j2

@@ -69,8 +69,8 @@ apiServer:
     audit-log-maxsize: "100"
 {% if false %}
 # Falco
-    audit-policy-file: "/etc/kubernetes/policies/k8s_audit_rules.yaml"
     audit-webhook-config-file: "/etc/kubernetes/policies/audit-webhook-kubeconfig"
+    audit-webhook-batch-max-wait: "5s"
 {% endif %}
   extraVolumes:
   - name: "audit-log"