qualys/cluster-sensor repository overview

⁠Qualys Cluster Sensor

The Qualys Cluster Sensor is the official container image published by Qualys, used to provide agentless inventory and posture insights for Kubernetes Clusters (EKS, AKS, GKE, OpenShift, etc.). It talks to the Kubernetes Control Plane and helps with different use cases including:

⁠Key Features

• Detailed Kubernetes Inventory Metadata: Such as Pods, Namespaces, Identities, and more
• Exposure & Attack Path Information: Cluster sensor uses the ingress/pod telemetry to detect container exposure (exposed to world and exposed outside of cluster). When paired with General Sensor it can help identify toxic risk combinations.
• Kubernetes Posture Management: The Cluster sensor also can perform Kubernetes Compliance Benchmarking (CIS for EKS, OpenShift, etc.) and reporting.
• Optimized Scanning: The Cluster Sensor can also be paired with Qualys Registry Scanning/Admission Controller to perform continuous agentless vulnerability scanning against in-use images while ensuring all deployed images are scanned by Qualys. This is suitable for hot clusters where there is little headroom to deploy General Sensor (Daemon Set).

⁠Supported Architectures

The image supports different architectures including:

• AMD64: linux/amd64
• ARM64: linux/arm64

⁠Installation

Please refer to the 'How to install cluster sensor' section of the Artifacthub link⁠ for detailed installation instructions.

⁠Documentation

For additional information on Qualys Cluster Sensor, please refer to the official documentation⁠.

⁠Verified Publisher

This image is marked as a Verified Publisher image from Qualys Inc., indicating authenticity and security.