THIS SCRIPT IS PROVIDED TO YOU "AS IS." TO THE EXTENT PERMITTED BY LAW, QUALYS HEREBY DISCLAIMS ALL WARRANTIES AND LIABILITY FOR THE PROVISION OR USE OF THIS SCRIPT. IN NO EVENT SHALL THESE SCRIPTS BE DEEMED TO BE CLOUD SERVICES AS PROVIDED BY QUALYS
Many customers want the ability to to boot strap K8S worker nodes with agents such as Qualys Cloud Agent. This script which is heavily inspired by patnaikshekhar lets you do that. The script is made available to all nodes via a config map and then in the container, install.sh is executed. This executes as a DaemonSet and is run on existing and new nodes. After the installation, the container will sleep infinity.
In ./k8s/sampleconfigmap.yaml
Customize Agent Installer Location
Set your own Qualys Cloud Agent source
AgentLocationDebian="https://qca-installer-binary-debian-URL"
AgentLocationRPM="https://qca-installer-binary-RPM-URL"
AgentLocationDebianArm="https://qca-installer-binary-debian-ARM-URL"
AgentLocationRPMArm="https://qca-installer-binary-RPM-ARM-URL"
Customize deployment config from your Qualys Subscription
ActivationID="QCA-ActivationId"
CustomerID="QCA-CustomerId"
Use the ServerUri value from https://www.qualys.com/platform-identification/ under Cloud Agent server with example format "https://qagpublic.qg1.apps.qualys.com/CloudAgent/"
ServerUri="https://<Qualys-Subscription-URL>/CloudAgent/"
Set logging level
LogLevel="5"
In ./k8s/daemonset.yaml
*Set image location
image: qualys/qca-k8s-bootstrap:latest
Before installing update the script variables in k8s/sampleconfigmap.yaml .
git clone https://github.com/qualys/cloud-agent-k8s-bootstrap
cd cloud-agent-k8s-bootstrap
docker build .
docker tag imageID yourRegistry/repo:tag
docker push yourRegistry/repo:tag
# Update ./k8s/daemonset
# Update script variables in ./k8s/sampleconfigmap.yaml to use your Agent Installer Binary URLs, ActivationID, CustomerID, ServerURI, and image location
kubectl apply -f ./k8sDockerfile is included to make your own image for loading into your registry
