Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide more info how run KubiScanon EKS cluster #48

Open
v-kuzma opened this issue Oct 12, 2022 · 2 comments
Open

Provide more info how run KubiScanon EKS cluster #48

v-kuzma opened this issue Oct 12, 2022 · 2 comments

Comments

@v-kuzma
Copy link

v-kuzma commented Oct 12, 2022

Description

I want to run KubiScan on the EKS cluster. But I did not find anything in the documentation or on the Internet about how to do it correctly.
Below is a description of the problems I encountered

  1. The documentation says that this tool should be launched on the master node - but it is impossible for EKS. There are just nodes.

  2. There are no details on whether this tool can be run on a local machine and remotely test something.

  3. There is very little documentation and it is confusing.

Please can you clarify the steps on how to run this tool on the EKS cluster and update the readme file because many things look non-obvious?

@g3rzi
Copy link
Contributor

g3rzi commented Oct 13, 2022

Hi Victor,
Thank you for taking the time to open a ticket.
I first want to say that in the last couple of weeks we did some major updates on the way we load KubiScan through containers and we are aware that the documentation is not updated, we are planning to fix that.
Regarding your questions:

  1. You are right, this is where you can use by using a service account. We created a setup for creating a special service account with the relevant permissions, after you create it, you can use this token to run KubiScan from remote.
    Actually, you don't need to run it on the master, you can run it everywhere, you will just need to have a kubeconfig with enough permissions. I need to update the readme :)
  2. We need to update the readme, I will take these notes when updating.
  3. We are aware of that, and we will see how we can improve that. Maybe creating a WiKi page in the repository that will help. You can also check the examples page or by running kubiscan -e.

I will update you once the readme will be updated.

Regarding the EKS, for now, what I would do is follow the creation of the service account to run KubiScan from remote.

@christophetd
Copy link

FWIW KubiScan on EKS worked fine for me and didn't need more guidance, this issue can probably be closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

4 participants