KSPM: How to run an on-demand scan on a Kubernetes cluster console?
197
Created On 09/06/26 05:09 AM - Last Modified 09/06/26 05:11 AM
Objective
How to run an on-demand scan on a Kubernetes cluster from Cortex cloud console?
Environment
- Cortex cloud
- Kubernetes cluster.
- Kubernetes connector.
Procedure
Prerequisites:
-
- A KSPM connector is deployed on the target cluster. If no connector is deployed, the context menu displays a Deploy connector option instead of Request scan.
- Ensure the Kubernetes connector for the target cluster is active and sends heartbeats to Cortex Cloud every 15 minutes.
- The KSPM connector is running version 2.0 or later. This version includes redefined cluster-level RBAC permissions that enhance security by restricting access to specific namespaces where possible.
Steps:
- Follow the path. Modules -> Kubernetes Security -> Kubernetes Cluster -> Click on a cluster.
- On top right corner click on the 3 vertical dots, and select "Request Scan"
- You get two options.
1. Inventory scan - Collects and updates the full inventory of Kubernetes resources in the cluster.
2. Nodes & container scan - Scans all nodes in the cluster, including container images, for vulnerabilities and misconfigurations. - Select your option and click Request. This triggers an on-demand scan.