Skip to content

Custom Security Agents

In some cases it is necessary to install customer security agents on a Yellowbrick deployment. Details of supported agents and how to approach running them are outlined here.

CrowdStrike Falcon Kubernetes Protection Agent on EKS

This guide provides recommendations on installing the CrowdStrike Falcon Kubernetes Protection agent on Amazon EKS clusters. The recommended approach is to use Helm, which installs the agent as Kubernetes resources within the cluster.

Installing the agent directly on the EKS nodes themselves is currently not supported, however the capability will be available in a subsequent Yellowbrick release by directly modifying node group launch templates.

Installing via Kubernetes Resources

CrowdStrike Falcon's recommended installation method for Kubernetes environments is to deploy the Falcon sensor as a Kubernetes DaemonSet using Helm. This approach is fully supported and simplifies the management and deployment of agents across your EKS nodes.

We highly recommend following the online documentation to install yourself.