Note: This is an example plugin that demonstrates how easy it is to integrate cluster security policy visibility into kubectl with the Deep Security APIs.
- clone repo to your ~/.kube/plugins directory
- pip install -r requirements.txt
- Create a Kubernetes secret called deepsecurity with your base64 encoded password. A sample secret.yaml file is included. kubectl apply -f secret.yaml
- Enter your DS information in config.yaml
- NOTE: DS computer name or IP must correspond to k8s node name
Commands:
kubectl plugin ds status
#will assign policy to all nodes or single node if node name specified
kubectl plugin ds assign_policy policyname
kubectl plugin ds assign_policy policyname nodename