Title
#core
i

Ivanlei

10/23/2020, 2:09 PM
Does anyone have experience running osquery in a k8s daemonset?
sundsta

sundsta

10/23/2020, 2:48 PM
I’ve done a proof of concept and it seemed to work fine
n

nyanshak

10/23/2020, 3:37 PM
So my company runs osquery in our k8s clusters as a daemonset. I'm not super familiar with the actual setup of the daemonset though. Will see if I can share some details of how that is setup / works.
zwass

zwass

10/23/2020, 4:35 PM
+1 I don't run k8s currently but very keen to learn more about how folks are using and want to use osquery in containerized envs.
n

nyanshak

10/27/2020, 10:40 PM
osquery is set up using a standard daemonset in our clusters, the pods have the hostnetwork flag enabled.
^ from the team on our side from me: I'm not sure if this actually covers all that we need to cover, and I want to look into it further when I have more time.