sec-agent

README

Running locally

To run agent locally you only need to have correct kubernetes contex and KUBECONFIG variable pointing to kubeconfig.

go run ./cmd/agent

Running locally on tilt

Start tilt on local kind cluster with mockapi backend which is located in ./tools/mockapi.

API_URL=http://mockapi tilt up

Build and run on k8s cluster

Build and push docker image to github registry.

IMAGE_TAG=test1 make push-github-docker

Install agent from helm chart

IMAGE_TAG=test1 CLUSTER_ID=<my-cluster-id> API_KEY=<my-api-token> API_URL=<my-api-url> ./hack/install_agent.sh

Custom image and profiling

Test docker images are pushed to ghcr.io/castai/sec-agent on each pull request.

helm upgrade castai-sec-agent castai-helm/castai-sec-agent -n castai-agent --reuse-values \ 
--set image.repository=ghcr.io/castai/sec-agent/agent \
--set image.tag=24c2fe8662f7fc63bb1ad1b0dbd43d611a3d1670 \
--set-string structuredConfig.imageScan.image.name=ghcr.io/castai/sec-agent/imgcollector:24c2fe8662f7fc63bb1ad1b0dbd43d611a3d1670 \
--set structuredConfig.imageScan.profileEnabled=true \
--set structuredConfig.imageScan.phlareEnabled=true