Skip to content

Commit c56736a

Browse files
committed
[workload-protection] WP Kubernetes user identities preview
1 parent 916dc43 commit c56736a

File tree

1 file changed

+14
-4
lines changed

1 file changed

+14
-4
lines changed

content/en/security/workload_protection/setup/agent/kubernetes.md

Lines changed: 14 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,10 @@ Use the following instructions to enable Workload Protection.
1717

1818
## Installation
1919

20+
{{< beta-callout url="" header="true" btn_hidden="true">}}
21+
Workload Protection now integrates with Kubernetes to collect [Kubernetes user credentials](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#users-in-kubernetes) and enrich its events with real user identities to help you investigate signals. Follow the instructions below to test the preview !
22+
{{< /beta-callout >}}
23+
2024
{{< tabs >}}
2125

2226
{{% tab "Datadog Operator" %}}
@@ -31,6 +35,11 @@ Use the following instructions to enable Workload Protection.
3135
name: datadog
3236
spec:
3337
features:
38+
# PREVIEW - Integrate with Kubernetes to enrich Workload Protection events with Kubernetes user identities
39+
# admissionController:
40+
# enabled: true
41+
# cwsInstrumentation:
42+
# enabled: true
3443
remoteConfiguration:
3544
enabled: true
3645
# Enables Threat Detection
@@ -48,16 +57,17 @@ Use the following instructions to enable Workload Protection.
4857
# Image collection is enabled by default with Datadog Operator version `>= 1.3.0`
4958
containerImage:
5059
enabled: true
51-
60+
5261
# Uncomment the following line if you are using Google Kubernetes Engine (GKE) or Amazon Elastic Kubernetes (EKS)
5362
# uncompressedLayersSupport: true
54-
63+
5564
# Enables Host Vulnerability Management
5665
host:
5766
enabled: true
5867
```
5968
60-
2. Apply the changes and restart the Agent.
69+
2. (optional) Uncomment the `admissionController` section if you want to test the preview of Workload Protection's integration with Kubernetes for user identity collection.
70+
3. Apply the changes and restart the Agent.
6171

6272
[2]: https://github.com/DataDog/datadog-operator/blob/main/docs/configuration.v2alpha1.md
6373

@@ -144,4 +154,4 @@ Add the following settings to the `env` section of `security-agent` and `system-
144154

145155
[5]: /getting_started/agent
146156
[6]: https://app.datadoghq.com/account/settings/agent/latest
147-
[7]: https://cloud.google.com/kubernetes-engine/docs/how-to/image-streaming#disable
157+
[7]: https://cloud.google.com/kubernetes-engine/docs/how-to/image-streaming#disable

0 commit comments

Comments
 (0)