Host and Cluster Shield (Technical Preview)

The Sysdig Host and Cluster Shields streamline the deployment, management, and configuration of the Sysdig suite of security and compliance tools. By consolidating multiple deployments into just two containerized components, the Host and Cluster Shields simplify operations in Kubernetes environments, helping you maintain the security and compliance posture of your system. You use the shield chart to install the Host and Cluster Shield components in your Kubernetes environment.

Cluster Shield is generally available as part of our current installation via the sysdig-deploy chart. For more details, see Kubernetes Installation. Host Shield Technical Preview introduces the new Host Shield and an updated chart, shield, for installing both Host and Cluster Shield with simplified configuration.

Use the shield chart if you want both Cluster Shield and Host Shield. If you want only Cluster Shield, install it with the generally available sysdig-deploy chart.

Benefits

Simplified Installation and Upgrades

  • Unified installation process: Only two artifacts to install simplifies Sysdig onboarding.
  • Streamlined upgrade paths: Reduced complexity and consistency across environments through simplified upgrade processes.

Unified Versioning

  • Single source: Centralized versioning information and release notes for the consolidated components.
  • Easier tracking: Simplified monitoring of new features, defect fixes, and performance enhancements.

Improved Compatibility and Support

  • Enhanced compatibility: Improved support across Sysdig suite of tools.
  • Streamlined support process: A unified agent approach simplifies troubleshooting and resolution efforts.

Host Shield

Host Shield consolidates the following features into one component:

  • Runtime Threat Detection
  • Host Vulnerability Scanning
  • KSPM for the Host
  • Rapid Response

Cluster Shield

Cluster Shield consolidates the following featuers into one component:

  • Container Vulnerability Scanning
  • Kubernetes Audit Threat Detection
  • KSPM for the Cluster

Installation

Follow specific instructions, depending on whether you are installing on Kubernetes, or as a standalone container or package on a host.