How to Onboard Kubernetes Account

Modified on Thu, 5 Sep at 7:29 PM

CloudDefense.Al can scan and visualize your Kubernetes cluster objects, including workloads and pods, through the use of a view-only Role-Based Access Control (RBAC) policy.

kubectl edit -n kube-system configmap/aws-auth

Add the lines below to the mapRoles section:

data: 
    mapRoles: | 
        - rolearn: arn:aws:iam::: 407638845061: role/Cdefense-us-east-1-407638845061-role_cross_account_1008358623
    groups: 
        - system:masters

create a cluster role binding to grant the role view-only access:

cat << EOF | kubectl apply -f -
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
 name: system:masters
subjects:
 - kind: Group
 name: system:masters-view-only
 apiGroup: rbac.authorization.k8s.io
roleRef:
 kind: ClusterRole
 name: view
 apiGroup: rbac.authorization.k8s.io
EOF