Viewing information about pod

To open the pod information,

on the graph, select the pod about which you want to receive information, and double-click to expand its information in the side panel.

Kaspersky Container Security displays pods on all types of graphs: namespace graphs and application graphs.

The solution opens a side panel with detailed information about the pod.

Kaspersky Container Security displays the following information about the pod:

• Object type.
• Maximum risk score among pod images.
• The security policy compliance status is Compliant or Not Compliant.
• Pod name.
• The General tab contains the following information about the object:
  • Date and time of creation.
  • Labels.
  • Pod running status.
  • Pod lifetime—the period between the date and time of viewing the pod information and the date and time of its creation.
  • List of ports used by pod containers in the following format: <"port name" port protocol>. For example, "dns" UDP 53.
  • Available system functions of the pod.
  • The name of the PV used by the pod.
  • The name of the PVC used.
  • The name of the application, namespace and cluster within which the pod is located.

  Also in this tab, you can click Download *.yaml to generate and download a file with a description of the pod.

• The Containers tab contains the following information on containers within the pod:
  • Name of the container.
  • Name of the image the container was deployed from.
  • Compliance status of the deployed image: Compliant or Non-compliant.
  • Maximum risk rating of the deployed image.
  • Number of security issues across all risk types. For vulnerabilities, the number of security issues is specified, broken down by risk severity.
  • Date and time of the last scan of the image from which the container was deployed.
  • List of ports used by pod containers in the following format: <"port name" port protocol>.
  • Additional properties of the container—it is an init container.

    A special container that is started when the pod is initialized before the main containers are started. Init containers prepare the environment for operation (for example, they access secrets or redirect network traffic) and may contain utilities that are not necessary or desirable in the main container.

• The Policies tab displays information about assurance policies and runtime policies applied to the pod. Information about policies applied to the pod is presented in two sections (Assurance policies and Runtime policies), similarly to the information displayed about the applicable policies when viewing information about the application on the graph.

  To view the detailed description of policies, you must have rights to view them. Policy management rights are required to make changes to policy settings.

Page top