Kubernetes Authentication

Kubernetes collection uses a kubeconfig and a named context. API-plane collectors call the cluster with that identity. Node-plane collectors read log files on the node that runs the kit, so the collection host must be able to see those paths.

MethodWhat you provideWhen to use
KubeconfigFull kubeconfig YAML and the context nameEvery Kubernetes connection. Ventra checks that the YAML parses and that the context exists before saving
  1. Create a service account and bind the read-only ClusterRole from the RBAC page.
  2. Build a kubeconfig whose current or named context uses that identity.
  3. Open Configuration, Authentication, and add a Kubernetes connection.
  4. On Provider details, enter a display name and the Kubernetes context.
  5. On Authenticate, paste the kubeconfig YAML.
  6. Run Validate connection. Ventra parses the YAML and confirms the context is present.

On edit, leave Kubeconfig Content blank to keep the file already saved on the server.

Deploy with infrastructure as code