3.2. Generating Sensor deployment files

Procedure

• Generate the required sensor configuration for your Kubernetes cluster and associate it with your Central instance by running the following command:

  $ roxctl sensor generate k8s --name <cluster_name> --central "$ROX_ENDPOINT"

Procedure

• Generate the required sensor configuration for your OpenShift Container Platform cluster and associate it with your Central instance by running the following command:

  $ roxctl sensor generate openshift --openshift-version <ocp_version> --name <cluster_name> --central "$ROX_ENDPOINT"

  where:

  <ocp_version>

  Specifies the major OpenShift Container Platform version number for your cluster. For example, specify 3 for OpenShift Container Platform version 3.x and specify 4 for OpenShift Container Platform version 4.x.

  Read the --help output to see other options that you might need to use depending on your system architecture.

  Verify that the endpoint you provide for --central can be reached from the cluster where you are deploying Red Hat Advanced Cluster Security for Kubernetes services.

  重要

  If you are using a non-gRPC capable load balancer, such as HAProxy, AWS Application Load Balancer (ALB), or AWS Elastic Load Balancing (ELB), follow these guidelines:

  • Use the WebSocket Secure (wss) protocol. To use wss, prefix the address with wss://, and

  • Add the port number after the address, for example:

    $ roxctl sensor generate k8s --central wss: