Skip to main content
Version: v3.7 (deprecated)

Deepfence Kubernetes Scanner

Kubernetes Compliance posture scanning uses a Compliance Scanner pod (helm chart) which is installed in your monitored kubernetes clusters.

NSA & CISA Cybersecurity Technical Report describes the complexities of securely managing Kubernetes an open-source, container-orchestration system used to automate deploying, scaling, and managing containerized applications.

Configuring Kubernetes Scanner​

helm repo add deepfence-k8s-scanner https://deepfence-helm-charts.s3.amazonaws.com/deepfence-k8s-scanner
helm show values deepfence-k8s-scanner/deepfence-k8s-scanner
helm show readme deepfence-k8s-scanner/deepfence-k8s-scanner
helm install deepfence-k8s-scanner deepfence-k8s-scanner/deepfence-k8s-scanner \
    --set image.tag="1.4.3" \
    --set managementConsoleUrl="40.40.40.40" \
    --set deepfenceKey="xxxxx" \
    --set clusterName="prod-cluster" \
    --namespace deepfence-k8s-scanner \
    --create-namespace

Kuberntes Scanner on Openshift​

  • Use steps from previous section to install k8s-scanner on openshift
  • Add anyuid and previliged permisions to k8s-scanner for it to work properly on openshift
oc adm policy add-scc-to-user privileged -z deepfence-k8s-scanner -n deepfence-k8s-scanner
oc adm policy add-scc-to-user anyuid -z deepfence-k8s-scanner -n deepfence-k8s-scanner