Installation of Kubescape in cluster

Prerequisites

  • Make sure you have an Kubescape account - if not, sign-up here
  • You need to have installation access to your cluster (you should be able to create Deployments, CronJobs, ConfigMaps and Secrets)
  • You must have Kubectl and Helm

Cluster requirements

ARMO cluster components require minimum 300Mib RAM and 400m CPU

Installing Kubescape cluster components with Helm

  1. Add the Vulnerability Scanning Helm Repo
helm repo add armo https://armosec.github.io/armo-helm/

Or, if already installed, run an upgrade:

helm repo update
  1. Get Your Account ID from Kubescape portal: click on "scan" on page https://portal.armo.cloud/risk and copy the unique identifier or get it from your Kubescape CLI:
kubescape config local get customerGUID
  1. Install the Helm Chart, use your Account ID
helm upgrade --install armo  armo/armo-cluster-components -n armo-system --create-namespace --set accountGuid=<my_account_guid> --set clusterName=`kubectl config current-context`

If you want to run your installation against the development environment run this:

helm upgrade --install armo  armo/armo-cluster-components -n armo-system --create-namespace --set accountGuid=<my_account_guid> --set clusterName=`kubectl config current-context` --set environment=dev

Post-install validation

Please check after installation that all components are running correctly

$ kubectl -n armo-system get pods
NAME                               READY   STATUS      RESTARTS   AGE
armo-kubescape-1638889680-jzpzm    0/1     Completed   0          19m
armo-vuln-scan-7d958f88b8-86wnl    1/1     Running     0          69m
armo-web-socket-7477498d97-7kksl   1/1     Running     0          69m

You should not see "Pending" PODs


Did this page help you?