From baf4237275ab482007ef44df2277f72516d04f28 Mon Sep 17 00:00:00 2001 From: Gabe Alford Date: Thu, 2 Jul 2026 10:52:52 -0600 Subject: [PATCH] chore: add new cloud region --- .../falcon-container-sensor-pull/README.md | 6 +++--- .../falcon-container-sensor-pull.sh | 3 ++- bash/install/README.md | 8 ++++---- bash/install/falcon-linux-install.sh | 10 +++++++--- bash/install/falcon-linux-uninstall.sh | 3 ++- bash/migrate/README.md | 8 ++++---- bash/migrate/falcon-linux-migrate.sh | 12 ++++++++---- powershell/install/README.md | 2 +- powershell/install/falcon_windows_install.ps1 | 3 ++- powershell/install/falcon_windows_uninstall.ps1 | 3 ++- powershell/migrate/README.md | 2 +- powershell/migrate/falcon_windows_migrate.ps1 | 5 +++-- 12 files changed, 39 insertions(+), 26 deletions(-) diff --git a/bash/containers/falcon-container-sensor-pull/README.md b/bash/containers/falcon-container-sensor-pull/README.md index 9c51d00..73ef137 100644 --- a/bash/containers/falcon-container-sensor-pull/README.md +++ b/bash/containers/falcon-container-sensor-pull/README.md @@ -81,7 +81,7 @@ To check your version of cURL, run the following command: `curl --version` ## Auto-Discovery of Falcon Cloud Region > [!IMPORTANT] -> Auto-discovery is only available for [us-1, us-2, eu-1] regions. +> Auto-discovery is only available for [us-1, us-2, us-3, eu-1] regions. The script supports auto-discovery of the Falcon cloud region. If the cloud region is not provided, the script will attempt to auto-discover it. If you want to set the cloud region manually, or if your region does not support auto-discovery, you set the `FALCON_CLOUD` environment variable or use the `-r, --region` flag. @@ -97,7 +97,7 @@ Required Flags: Optional Flags: -f, --cid Falcon Customer ID - -r, --region Falcon Cloud Region [us-1|us-2|eu-1|us-gov-1|us-gov-2] (Default: us-1) + -r, --region Falcon Cloud Region [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2] (Default: us-1) -c, --copy Registry to copy the image to, e.g., myregistry.com/mynamespace By default, the image name and tag are appended. Use --copy-omit-image-name and/or --copy-custom-tag to change that behavior. @@ -146,7 +146,7 @@ Help Options: | `-f`, `--cid ` | `$FALCON_CID` | `None` (Optional) | CrowdStrike Customer ID (CID). *If not provided, CID will be auto-detected.* | | `-u`, `--client-id ` | `$FALCON_CLIENT_ID` | `None` (Required) | CrowdStrike API Client ID | | `-s`, `--client-secret ` | `$FALCON_CLIENT_SECRET` | `None` (Required) | CrowdStrike API Client Secret | -| `-r`, `--region ` | `$FALCON_CLOUD` | `us-1` (Optional) | CrowdStrike Region.
\**Auto-discovery is only available for [`us-1, us-2, eu-1`] regions.* | +| `-r`, `--region ` | `$FALCON_CLOUD` | `us-1` (Optional) | CrowdStrike Region.
\**Auto-discovery is only available for [`us-1, us-2, us-3, eu-1`] regions.* | | `-c`, `--copy ` | `$COPY` | `None` (Optional) | Registry you want to copy the sensor image to. Example: `myregistry.com/mynamespace`.
*\*By default, the image name and tag are appended. Use `--copy-omit-image-name` and/or `--copy-custom-tag` to change that behavior.* | | `-v`, `--version ` | `$SENSOR_VERSION` | `None` (Optional) | Specify sensor version to retrieve from the registry | | `-p`, `--platform ` | `$SENSOR_PLATFORM` | `None` (Optional) | Specify sensor platform to retrieve from the registry | diff --git a/bash/containers/falcon-container-sensor-pull/falcon-container-sensor-pull.sh b/bash/containers/falcon-container-sensor-pull/falcon-container-sensor-pull.sh index 45ed3a0..1ef62f4 100755 --- a/bash/containers/falcon-container-sensor-pull/falcon-container-sensor-pull.sh +++ b/bash/containers/falcon-container-sensor-pull/falcon-container-sensor-pull.sh @@ -18,7 +18,7 @@ Required Flags: Optional Flags: -f, --cid Falcon Customer ID - -r, --region Falcon Cloud Region [us-1|us-2|eu-1|us-gov-1|us-gov-2] (Default: us-1) + -r, --region Falcon Cloud Region [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2] (Default: us-1) -c, --copy Registry to copy the image to, e.g., myregistry.com/mynamespace By default, the image name and tag are appended. Use --copy-omit-image-name and/or --copy-custom-tag to change that behavior. @@ -73,6 +73,7 @@ cs_cloud() { case "${FALCON_CLOUD}" in us-1) echo "api.crowdstrike.com" ;; us-2) echo "api.us-2.crowdstrike.com" ;; + us-3) echo "api.us-3.crowdstrike.com" ;; eu-1) echo "api.eu-1.crowdstrike.com" ;; us-gov-1) echo "api.laggar.gcw.crowdstrike.com" ;; us-gov-2) echo "api.us-gov-2.crowdstrike.mil" ;; diff --git a/bash/install/README.md b/bash/install/README.md index f531d51..096dcdd 100644 --- a/bash/install/README.md +++ b/bash/install/README.md @@ -68,7 +68,7 @@ export FALCON_CLIENT_SECRET="YYYYYYYYY" #### Auto-Discovery of Falcon Cloud Region > [!IMPORTANT] -> Auto-discovery is only available for [us-1, us-2, eu-1] regions. +> Auto-discovery is only available for [us-1, us-2, us-3, eu-1] regions. The scripts support auto-discovery of the Falcon cloud region. If the `FALCON_CLOUD` environment variable is not set, the script will attempt to auto-discover it. If you want to set the cloud region manually, or if your region does not support auto-discovery, you can set the `FALCON_CLOUD` environment variable: @@ -124,7 +124,7 @@ Authentication: - FALCON_CLOUD (default: unset) The cloud region where your CrowdStrike Falcon instance is hosted. Required if using FALCON_ACCESS_TOKEN. - Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2']. + Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2']. Other Options - FALCON_CID (default: auto) @@ -166,7 +166,7 @@ Other Options - FALCON_SENSOR_CLOUD (default: unset) To pin the cloud region for unified sensor installations. This allows specifying the cloud region for unified sensors at installation time. - Accepted values are [us-1|us-2|eu-1|us-gov-1|us-gov-2]. + Accepted values are [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2]. - FALCON_UNINSTALL (default: false) To uninstall the falcon sensor. @@ -279,7 +279,7 @@ Authentication: - FALCON_CLOUD (default: unset) The cloud region where your CrowdStrike Falcon instance is hosted. Required if using FALCON_ACCESS_TOKEN. - Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2']. + Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2']. Other Options: - FALCON_MAINTENANCE_TOKEN (default: unset) diff --git a/bash/install/falcon-linux-install.sh b/bash/install/falcon-linux-install.sh index f4f65ee..f7b4cd4 100755 --- a/bash/install/falcon-linux-install.sh +++ b/bash/install/falcon-linux-install.sh @@ -24,7 +24,7 @@ Authentication: - FALCON_CLOUD (default: unset) The cloud region where your CrowdStrike Falcon instance is hosted. Required if using FALCON_ACCESS_TOKEN. - Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2']. + Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2']. Other Options - FALCON_CID (default: auto) @@ -66,7 +66,7 @@ Other Options - FALCON_SENSOR_CLOUD (default: unset) To pin the cloud region for unified sensor installations. This allows specifying the cloud region for unified sensors at installation time. - Accepted values are [us-1|us-2|eu-1|us-gov-1|us-gov-2]. + Accepted values are [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2]. - FALCON_UNINSTALL (default: false) To uninstall the falcon sensor. @@ -605,6 +605,7 @@ cs_cloud() { case "${cs_falcon_cloud}" in us-1) echo "api.crowdstrike.com" ;; us-2) echo "api.us-2.crowdstrike.com" ;; + us-3) echo "api.us-3.crowdstrike.com" ;; eu-1) echo "api.eu-1.crowdstrike.com" ;; us-gov-1) echo "api.laggar.gcw.crowdstrike.com" ;; us-gov-2) echo "api.us-gov-2.crowdstrike.mil" ;; @@ -1073,6 +1074,9 @@ if [ -n "$FALCON_SENSOR_CLOUD" ]; then us-2) echo "us-2" ;; + us-3) + echo "us-3" + ;; eu-1) echo "eu-1" ;; @@ -1083,7 +1087,7 @@ if [ -n "$FALCON_SENSOR_CLOUD" ]; then echo "us-gov-2" ;; *) - die "Unrecognized SENSOR_CLOUD: ${FALCON_SENSOR_CLOUD} value must be one of : [us-1|us-2|eu-1|us-gov-1|us-gov-2]" + die "Unrecognized SENSOR_CLOUD: ${FALCON_SENSOR_CLOUD} value must be one of : [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2]" ;; esac ) diff --git a/bash/install/falcon-linux-uninstall.sh b/bash/install/falcon-linux-uninstall.sh index af8da9e..566158b 100755 --- a/bash/install/falcon-linux-uninstall.sh +++ b/bash/install/falcon-linux-uninstall.sh @@ -24,7 +24,7 @@ Authentication: - FALCON_CLOUD (default: unset) The cloud region where your CrowdStrike Falcon instance is hosted. Required if using FALCON_ACCESS_TOKEN. - Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2']. + Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2']. Other Options: - FALCON_MAINTENANCE_TOKEN (default: unset) @@ -185,6 +185,7 @@ cs_cloud() { case "${cs_falcon_cloud}" in us-1) echo "api.crowdstrike.com" ;; us-2) echo "api.us-2.crowdstrike.com" ;; + us-3) echo "api.us-3.crowdstrike.com" ;; eu-1) echo "api.eu-1.crowdstrike.com" ;; us-gov-1) echo "api.laggar.gcw.crowdstrike.com" ;; us-gov-2) echo "api.us-gov-2.crowdstrike.mil" ;; diff --git a/bash/migrate/README.md b/bash/migrate/README.md index 686b716..fe4a39d 100644 --- a/bash/migrate/README.md +++ b/bash/migrate/README.md @@ -70,7 +70,7 @@ export NEW_FALCON_CID="AAAAAAAAAAA" # Optional, will be auto-detected if not pr #### Auto-Discovery of Falcon Cloud Region > [!IMPORTANT] -> Auto-discovery is only available for [us-1, us-2, eu-1] regions. +> Auto-discovery is only available for [us-1, us-2, us-3, eu-1] regions. The scripts support auto-discovery of the Falcon cloud region. If the `[OLD|NEW]FALCON_CLOUD` environment variable is not set, the script will attempt to auto-discover it. If you want to set the cloud region manually, or if your region does not support auto-discovery, you can set the `[OLD|NEW]FALCON_CLOUD` environment variable: @@ -101,7 +101,7 @@ Old CID Authentication: - OLD_FALCON_CLOUD (default: 'us-1') The cloud region where your old CrowdStrike Falcon instance is hosted. - Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2']. + Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2']. New CID Authentication: - NEW_FALCON_CLIENT_ID (default: unset) [Required] @@ -116,7 +116,7 @@ New CID Authentication: - NEW_FALCON_CLOUD (default: 'us-1') The cloud region where your new CrowdStrike Falcon instance is hosted. - Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2']. + Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2']. - NEW_FALCON_CID (default: unset) Your CrowdStrike Falcon customer ID (CID) for the new CID. @@ -181,7 +181,7 @@ Other Options - FALCON_SENSOR_CLOUD (default: unset) To pin the cloud region for unified sensor installations. This allows specifying the cloud region for unified sensors at installation time. - Accepted values are [us-1|us-2|eu-1|us-gov-1|us-gov-2]. + Accepted values are [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2]. - ALLOW_LEGACY_CURL (default: false) To use the legacy version of curl; version < 7.55.0. diff --git a/bash/migrate/falcon-linux-migrate.sh b/bash/migrate/falcon-linux-migrate.sh index 09f6b94..a1f8eb0 100755 --- a/bash/migrate/falcon-linux-migrate.sh +++ b/bash/migrate/falcon-linux-migrate.sh @@ -28,7 +28,7 @@ Old CID Authentication: - OLD_FALCON_CLOUD (default: 'us-1') The cloud region where your old CrowdStrike Falcon instance is hosted. - Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2']. + Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2']. New CID Authentication: - NEW_FALCON_CLIENT_ID (default: unset) [Required] @@ -43,7 +43,7 @@ New CID Authentication: - NEW_FALCON_CLOUD (default: 'us-1') The cloud region where your new CrowdStrike Falcon instance is hosted. - Accepted values are ['us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2']. + Accepted values are ['us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2']. - NEW_FALCON_CID (default: unset) Your CrowdStrike Falcon customer ID (CID) for the new CID. @@ -108,7 +108,7 @@ Other Options - FALCON_SENSOR_CLOUD (default: unset) To pin the cloud region for unified sensor installations. This allows specifying the cloud region for unified sensors at installation time. - Accepted values are [us-1|us-2|eu-1|us-gov-1|us-gov-2]. + Accepted values are [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2]. - ALLOW_LEGACY_CURL (default: false) To use the legacy version of curl; version < 7.55.0. @@ -281,6 +281,7 @@ cs_cloud() { case "${cs_falcon_cloud}" in us-1) echo "api.crowdstrike.com" ;; us-2) echo "api.us-2.crowdstrike.com" ;; + us-3) echo "api.us-3.crowdstrike.com" ;; eu-1) echo "api.eu-1.crowdstrike.com" ;; us-gov-1) echo "api.laggar.gcw.crowdstrike.com" ;; us-gov-2) echo "api.us-gov-2.crowdstrike.mil" ;; @@ -1316,6 +1317,9 @@ if [ -n "$FALCON_SENSOR_CLOUD" ]; then us-2) echo "us-2" ;; + us-3) + echo "us-3" + ;; eu-1) echo "eu-1" ;; @@ -1326,7 +1330,7 @@ if [ -n "$FALCON_SENSOR_CLOUD" ]; then echo "us-gov-2" ;; *) - die "Unrecognized SENSOR_CLOUD: ${FALCON_SENSOR_CLOUD} value must be one of : [us-1|us-2|eu-1|us-gov-1|us-gov-2]" + die "Unrecognized SENSOR_CLOUD: ${FALCON_SENSOR_CLOUD} value must be one of : [us-1|us-2|us-3|eu-1|us-gov-1|us-gov-2]" ;; esac ) diff --git a/powershell/install/README.md b/powershell/install/README.md index 98476a2..f7efb77 100644 --- a/powershell/install/README.md +++ b/powershell/install/README.md @@ -27,7 +27,7 @@ Ensure the following API scopes are enabled: ## Auto-Discovery of Falcon Cloud Region > [!IMPORTANT] -> Auto-discovery is only available for [us-1, us-2, eu-1] regions. +> Auto-discovery is only available for [us-1, us-2, us-3, eu-1] regions. The scripts support auto-discovery of the Falcon cloud region. If the `FalconCloud` parameter is not set, the script will attempt to auto-discover the cloud region. If you want to set the cloud region manually, or if your region does not support auto-discovery, you can set the `FalconCloud` parameter. diff --git a/powershell/install/falcon_windows_install.ps1 b/powershell/install/falcon_windows_install.ps1 index 34a92f9..419b715 100755 --- a/powershell/install/falcon_windows_install.ps1 +++ b/powershell/install/falcon_windows_install.ps1 @@ -76,7 +76,7 @@ Updated 2021-10-22 to include 'sensor_version' property when matching policy to [System.Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSReviewUnusedParameter', 'DeleteScript')] param( [Parameter(Position = 1)] - [ValidateSet('autodiscover', 'us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2')] + [ValidateSet('autodiscover', 'us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2')] [string] $FalconCloud = 'autodiscover', [Parameter(Position = 2)] @@ -195,6 +195,7 @@ begin { 'autodiscover' { 'https://api.crowdstrike.com'; break } 'us-1' { 'https://api.crowdstrike.com'; break } 'us-2' { 'https://api.us-2.crowdstrike.com'; break } + 'us-3' { 'https://api.us-3.crowdstrike.com'; break } 'eu-1' { 'https://api.eu-1.crowdstrike.com'; break } 'us-gov-1' { 'https://api.laggar.gcw.crowdstrike.com'; break } 'us-gov-2' { 'https://api.us-gov-2.crowdstrike.mil'; break } diff --git a/powershell/install/falcon_windows_uninstall.ps1 b/powershell/install/falcon_windows_uninstall.ps1 index 1fde024..aac3f9a 100755 --- a/powershell/install/falcon_windows_uninstall.ps1 +++ b/powershell/install/falcon_windows_uninstall.ps1 @@ -85,7 +85,7 @@ param( [switch] $RemoveHost, [Parameter(Position = 8)] - [ValidateSet('autodiscover', 'us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2')] + [ValidateSet('autodiscover', 'us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2')] [string] $FalconCloud = 'autodiscover', [Parameter(Position = 9)] @@ -181,6 +181,7 @@ begin { 'autodiscover' { 'https://api.crowdstrike.com'; break } 'us-1' { 'https://api.crowdstrike.com'; break } 'us-2' { 'https://api.us-2.crowdstrike.com'; break } + 'us-3' { 'https://api.us-3.crowdstrike.com'; break } 'eu-1' { 'https://api.eu-1.crowdstrike.com'; break } 'us-gov-1' { 'https://api.laggar.gcw.crowdstrike.com'; break } 'us-gov-2' { 'https://api.us-gov-2.crowdstrike.mil'; break } diff --git a/powershell/migrate/README.md b/powershell/migrate/README.md index a909f8d..e39a631 100644 --- a/powershell/migrate/README.md +++ b/powershell/migrate/README.md @@ -25,7 +25,7 @@ The following **API scopes** are required: ## Auto-Discovery of Falcon Cloud Region > [!IMPORTANT] -> Auto-discovery is only available for [us-1, us-2, eu-1] regions. +> Auto-discovery is only available for [us-1, us-2, us-3, eu-1] regions. The script supports auto-discovery of the Falcon cloud region. If the `[New|Old]FalconCloud` parameter is not set, the script will attempt to auto-discover the cloud region. If you want to set the cloud region manually, or if your region does not support auto-discovery, you can set the `[New|Old]FalconCloud` parameter. diff --git a/powershell/migrate/falcon_windows_migrate.ps1 b/powershell/migrate/falcon_windows_migrate.ps1 index 59fe0a0..c4ec7b8 100644 --- a/powershell/migrate/falcon_windows_migrate.ps1 +++ b/powershell/migrate/falcon_windows_migrate.ps1 @@ -76,7 +76,7 @@ param( [ValidatePattern('\w{40}')] [string] $NewFalconClientSecret, [Parameter(Position = 3)] - [ValidateSet('autodiscover', 'us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2')] + [ValidateSet('autodiscover', 'us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2')] [string] $NewFalconCloud = 'autodiscover', [Parameter(Position = 4)] [string] $NewMemberCid, @@ -87,7 +87,7 @@ param( [ValidatePattern('\w{40}')] [string] $OldFalconClientSecret, [Parameter(Position = 7)] - [ValidateSet('autodiscover', 'us-1', 'us-2', 'eu-1', 'us-gov-1', 'us-gov-2')] + [ValidateSet('autodiscover', 'us-1', 'us-2', 'us-3', 'eu-1', 'us-gov-1', 'us-gov-2')] [string] $OldFalconCloud = 'autodiscover', [Parameter(Position = 8)] [string] $OldMemberCid, @@ -992,6 +992,7 @@ function Get-FalconCloud ([string] $xCsRegion) { 'autodiscover' { 'https://api.crowdstrike.com'; break } 'us-1' { 'https://api.crowdstrike.com'; break } 'us-2' { 'https://api.us-2.crowdstrike.com'; break } + 'us-3' { 'https://api.us-3.crowdstrike.com'; break } 'eu-1' { 'https://api.eu-1.crowdstrike.com'; break } 'us-gov-1' { 'https://api.laggar.gcw.crowdstrike.com'; break } 'us-gov-2' { 'https://api.us-gov-2.crowdstrike.mil'; break }