!!! info "Directory Inventory" See the Operations Directory Inventory for a complete listing of files and resources in this directory.
This section provides guidance on operational aspects of the Secure Kubernetes Container Scanning Helm charts, including troubleshooting, performance optimization, and maintenance procedures.
The operations documentation is organized into the following sections:
- Troubleshooting: Solutions for common issues encountered with the Helm charts
- Performance: Guidance for optimizing performance of container scanning operations
- Maintenance: Procedures for maintaining and updating the scanning infrastructure
After installing the Helm charts, verify successful deployment:
# Check infrastructure components
kubectl get all -n scanning-namespace -l app.kubernetes.io/instance=scanner-infrastructure
# Verify RBAC configuration
kubectl get serviceaccount,role,rolebinding -n scanning-namespace -l app.kubernetes.io/instance=scanner-infrastructure
# Test accessibility to target pods
./kubernetes-scripts/generate-kubeconfig.sh scanning-namespace inspec-scanner ./kubeconfig.yaml
KUBECONFIG=./kubeconfig.yaml kubectl get pods -n scanning-namespace
Monitor scanning operations for issues:
# Check scanner logs
kubectl logs -n scanning-namespace scanner-pod -c scanner
# Monitor scan results
kubectl exec -n scanning-namespace scanner-pod -c scanner -- ls -la /results
# Check for error conditions
kubectl exec -n scanning-namespace scanner-pod -c scanner -- grep -i error /results/scan-results.json
Regular maintenance tasks include:
- Token Rotation: Regularly rotate service account tokens
- RBAC Updates: Update RBAC permissions as needed for new pods
- Chart Updates: Upgrade Helm charts to latest versions
- Profile Updates: Keep compliance profiles up to date
- Security Patches: Apply security patches to scanner images
To effectively manage your scanning infrastructure:
- Review the Troubleshooting guide for common issues and solutions
- Explore the Performance guide for optimization strategies
- Follow the Maintenance procedures for keeping your environment up to date