I am currently implementing falcon-sensor on on-premise kubernetes cluster. When I deployed some testing application on the falcon-system namespace, the app run, but when I deploy it on a different namespace, its return error:
Error creating: Internal error occurred: failed calling webhook "falcon-sensor-injector.falcon-system.svc": failed to call webhook: Post "https://falcon-sensor-injector.falcon-system.svc:443/mutate?timeout=30s": service "falcon-sensor-injector" not found
This is my falcon-sensor daemon set:
NAME READY STATUS RESTARTS AGE
pod/falcon-sensor-6gts9 1/1 Running 0 15m
pod/falcon-sensor-gb7sr 1/1 Running 0 15m
pod/falcon-sensor-nkdmp 1/1 Running 0 15m
NAME DESIRED CURRENT READY UP-TO-DATE AVAILABLE NODE SELECTOR AGE
daemonset.apps/falcon-sensor 3 3 3 3 3 kubernetes.io/os=linux 15m
After some investigation, I found out that it was sensor.falcon-system.crowdstrike.com/injection
that cause the issue but I don’t know how to remove it. Is it a crowdstrike bug or some misconfiguration?
Thanks.
I tried reset my k8s cluster, reinstall the falcon-sensor.