Containers
Kubernetes
The images actually running in your clusters, discovered with nothing more than permission to list pods.
What the connector does
A manifest you apply creates a service account in your cluster that can only list pods, plus a scheduled job that regularly sends the list of images to TechWatchAlert. Nothing else leaves the cluster, and no inbound connection is opened.
What comes into TechWatchAlert
- Running images, with the namespaces they run in
- Images that no longer run, flagged and no longer re-read
- For each tracked image, its system packages, as for a Docker image
Setup
- Name the cluster, then generate the techwatchalert.yaml manifest (it contains the cluster token, shown only once)
- Apply it with “kubectl apply -f techwatchalert.yaml”
- After the first upload, turn on “Track this image” for the images to monitor: nothing is pulled before that
In the same family
Connectors
Plug in your tools in minutes
Start with a repository, a fleet or a scan report: your first targeted alerts arrive with the first sync.
Free plan, no credit card · hosted in France