Supports 3 modes to run the scanner: server, job, and cronjob.
Deployment mode (default): will run kubesec in server mode over http and make possible to send it workload for scanning interactively.
job mode: runs once scanning workload on all namespaces (default) or the specified ones.
cron mode: runs on specified schedule on all namespaces (default) or the specified ones.
helm repo add kubesec https://abarrak.github.io/kubesec-helm
helm install kubesec-scanner kubesec/kubesec --version 1.0.0
To run in job mode (1 time basis):
helm install kubesec-scanner kubesec/kubesec --set mode=job
To run in cronjob periodically:
helm install kubesec-scanner kubesec/kubesec --set mode=cron
You can complement the chart with the UI from here to visualize and analyze reports.
MIT.