Deploy Crowdstrike Falcon for VMWare Tanzu without a stemcell

Products

• Operations Manager

Issue/Introduction

When installing Crowdstrike Falcon for VMWare Tanzu, you may notice there is a requirement of ">= ubuntu-xenial 621" in Stemcell Library in ops manager web UI. Xenial stemcell reaches end of support in April 2024, which causes concerns of keeping an obsolete stemcell in the foundation.

Cause

Crowdstrike Falcon for VMWare Tanzu has no "Resource Config" panel in ops manager web UI as there are no errands or deployments used in this tile. 

This tile is only an addon at the moment, and all the Ubuntu versions are supported. For example, if the TAS tile is running on ubuntu-jammy, this addon works fine inside the TAS VMs.

- name: falcon-linux-sensor-config runtime_config: | addons: - include: stemcell: - os: ubuntu-jammy - os: ubuntu-bionic - os: ubuntu-xenial - os: ubuntu-trusty

 

Resolution

It is safe to ignore the warning “No compatible stemcell available” for this tile. We can deploy Crowdstrike Falcon for VMWare Tanzu in ops manager web UI without picking up a stemcell. Here are the procedures.

• Unconfigured Stemcell since it is not needed or used

• Selected configuration for bosh to deploy the addon to the Tanzu infrastructure environment

• Changelog post deployment showing the CrowdStrike Falcon addon was deployed successfully without a Stemcell

• CrowdStrike Falcon tile status shows no resources and is empty since no stemcell is used