Installing agents using a Helm Chart package

Before installing agents, you must create an agent group.

To install agents using a Helm Chart package:

1. Use the Kaspersky Container Security OpenAPI to download the values.yaml configuration file using the following command:

   curl -X 'GET' \

   '{{kcs_domain}}/api/v1/integrations/agent-group/{{agentGroupId}}/values' \

   -H 'accept: application/x-yaml' \

   -H 'Tron-Token: {{token}}' -o values-agents.yaml

   where

   • {{agentGroupId}} is the unique ID (UUID) that the solution assigns to the agent group when it is created.
   • {{token}} is the API token, which you can see in the user profile.

   After downloading the file, you will have 2 configuration files: values.yaml from the distribution kit and values-agents.yaml downloaded using the Kaspersky Container Security OpenAPI.

2. If necessary, rename the configuration file in the Helm Chart package from the distribution kit from values.yaml to values-kcs.yaml. This file name indicates that the file contains data for installing Kaspersky Container Security.

   We do not recommend replacing the values.yaml configuration file in the Helm Chart package from the distribution kit. This may result in the loss of data for the installation of Kaspersky Container Security.

3. Install the values-agents.yaml configuration file using the following command:

   helm install kcs-agents . \

   --create-namespace \

   --namespace kcs-agents \

   --values values-agents.yaml \

   --set ...

When installing agents using a Helm Chart package, consider the following:

• If agents are installed in a cluster in which the solution is deployed, the namespace of the agents must be different from the namespace of Kaspersky Container Security. By default, the namespace of Kaspersky Container Security is kcs.
• Secrets that you may have specified when creating an agent group are not transferred to the agent installation configuration file (values-agents.yaml). For example, the values of the following variables are not transferred:
  • pullSecret objects for downloading images
  • SIEM system authorization credentials in SIEM_CREDENTIALS
  • anti-virus database proxy server data in MALWARE_DB_PROXY_URL

  If you want to keep the values of such variables, you must specify them again manually or set them using the --set command when installing using the Helm Chart package from the distribution kit.

If necessary, you can also configure parameters for network reputation databases. For this purpose, you must add the following variables to the agents configuration file and specify their values:

• UPDATE_SOURCE is the web address of the source of updates to the reputation databases. This parameter can be left unspecified if Kaspersky servers are used to update databases.

  If a file server with updates for private corporate networks (kcs-updates) is used, you must specify the value of the UPDATE_SOURCE variable. Failing this, the solution will request updates from Kaspersky servers.

• UPDATE_PROXY is the proxy server for external network reputation databases or the file server with updates for private corporate networks (kcs-updates).

Before updating Kaspersky Container Security agents to version 2.1.x, you must first delete the installed agents by following the agent installation instructions from the previous version or by running the following command: kubectl delete -f <file> -n <namespace>. After that, you need to apply the agent installation instructions for Kaspersky Container Security version 2.1.x.

Page top