Installing agents in the web interface

Before installing agents, you must create an agent group.

To install agents in the web interface:

1. In the main menu, go to the Components → Agents section.
2. In the Group name column of the table, select an agent group, click it, and select the Deployment data tab.
3. Click the icon next to the Deployment token field to copy the generated deployment token.
4. Click the icon next to the Configuration field to copy the agent installation instructions.

   You can also upload the agent installation instructions as a .YAML file.

5. Run the following command:

   kubectl apply -f <file> -n <namespace>

   Following the application of the instruction, the agent is installed on all worker nodes of the cluster.

The solution automatically updates the agent installation instructions if you change the following settings specified for the agent group:

• TLS certificates of the solution
• URL, user name, and password for downloading the kube-agent and node-agent images
• The linked SIEM system
• Settings in the Node monitoring section

Agents need access to the Kaspersky Container Security API. If connectivity between the agents and the solution API can only be achieved with a proxy server, you can add a proxy server configuration to the agent installation instructions by creating a special secret.

To add a proxy server configuration to the agent installation instructions:

1. Specify proxy server information in BASE64 encoding. The example below shows proxy server information for http://proxy.example.com:8080:

   ---

   apiVersion: v1

   kind: Secret

   metadata:

   name: http-client-proxy

   namespace: kcs-namespace

   type: opaque

   data:

   HTTP_CLIENT_PROXY: 'aHR0cDovL3Byb3h5LmV4YW1wbGUuY29tOjgwODA='

   ---

2. Add the secret to the ENV section of the DaemonSet and Deployment resources in the agent installation instructions:

   - name: HTTP_CLIENT_PROXY

   valueFrom:

   secretKeyRef:

   name: http-client-proxy

   key: HTTP_CLIENT_PROXY

You must copy or download the updated instruction in a YAML file again, and then apply it by using the kubectl apply -f <file> -n <namespace> command. Otherwise, changes of these parameters are not applied to installed agents.

Before updating Kaspersky Container Security agents to version 2.1.x, you must first delete the installed agents by following the agent installation instructions from the previous version or by running the following command: kubectl delete -f <file> -n <namespace>. After that, you need to apply the agent installation instructions for Kaspersky Container Security version 2.1.x.

Page top